6045 matches found
CVE-2021-46024
Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cartadd.php, No login is required...
Sql injection
Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cartadd.php, No login is required...
PT-2022-12509
Name of the Vulnerable Software and Affected Versions Projectworlds online-shopping-webvsite-in-php version 1.0 Description The issue is related to a SQL Injection vulnerability. This vulnerability can be exploited via the id parameter in the cart add.php file. No login is required to exploit thi...
pimcore code issue vulnerability (CNVD-2022-07499)
Pimcore is a set of open source Web content management platform for creating and managing Web applications from Austrian company Pimcore. The platform integrates Web content management, e-commerce frameworks and product information management applications.Pimcore has a code issue vulnerability in...
CVE-2022-0215
The Login/Signup Popup, Waitlist Woocommerce Back in stock notifier , and Side Cart Woocommerce Ajax WordPress plugins by XootiX are vulnerable to Cross-Site Request Forgery via the savesettings function found in the /includes/xoo-framework/admin/class-xoo-admin-settings.php file which makes it...
Cross site request forgery (csrf)
The Login/Signup Popup, Waitlist Woocommerce Back in stock notifier , and Side Cart Woocommerce Ajax WordPress plugins by XootiX are vulnerable to Cross-Site Request Forgery via the savesettings function found in the /includes/xoo-framework/admin/class-xoo-admin-settings.php file which makes it...
Pimcore security vulnerabilities
Pimcore is a set of open source Web content management platform for creating and managing Web applications from Austrian company Pimcore. The platform integrates Web content management, e-commerce frameworks and product information management applications.Pimcore has a code issue vulnerability in...
CVE-2022-0215: Cross-Site Request Forgery (CSRF)
The Login/Signup Popup, Waitlist Woocommerce Back in stock notifier , and Side Cart Woocommerce Ajax WordPress plugins by XootiX are vulnerable to Cross-Site Request Forgery via the savesettings function found in the /includes/xoo-framework/admin/class-xoo-admin-settings.php file which makes it...
WordPress plugins affected by critical vulnerability impacting 84,000 websites
THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here. WordPress powers over 43.0% of all the websites on the Internet. A Cross-Site Request Forgery vulnerability CVE-2022-0215 was discovered in three plugins of WordPress. This flaw made it possible for an attacker to update...
PT-2022-13041
Name of the Vulnerable Software and Affected Versions Login/Signup Popup versions = 2.2 Waitlist Woocommerce Back in stock notifier versions = 2.5.1 Side Cart Woocommerce Ajax versions = 2.0 Description The issue affects WordPress plugins, allowing attackers to update arbitrary options on a site,...
WordPress Side Cart Woocommerce (Ajax) plugin <= 2.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Options Update
Cross-Site Request Forgery CSRF vulnerability leading to Arbitrary Options Update discovered by Chloe Chamberland in WordPress Side Cart Woocommerce Ajax plugin versions = 2.0. Solution Update the WordPress Side Cart Woocommerce Ajax plugin to the latest available version at least 2.1...
PT-2022-2088
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 100.0.4896.60 Microsoft Edge affected versions not specified Description The issue is related to a use after free vulnerability in the Shopping Cart component, which can be exploited by a remote attacker to...
CSRF forgery protection bypass in solidus_frontend
Impact CSRF vulnerability that allows a malicious site to add an item to the user's cart without their knowledge. All solidusfrontend versions are affected. If you're using your own storefront, please, follow along to make sure you're not affected. To reproduce the issue: - Pick the id for a...
Projectworlds Online Shopping System CSRF Vulnerability
Projectworlds Online Shopping System is an online shopping system from the Austrian company Projectworlds.A security vulnerability exists in Projectworlds Online Shopping System PHP, which stems from a CSRF vulnerability in ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in...
Projectworlds Online Shopping System SQL Injection Vulnerability
Projectworlds Online Shopping System is an online shopping system from the Austrian company Projectsworlds.A SQL injection vulnerability exists in Projectsworlds Online Book Store PHP, which stems from the fact that Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the...
CVE-2021-43157
Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cartremove.php...
CVE-2021-43157
Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cartremove.php...
CVE-2021-43155
Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php...