6045 matches found
Cross-Site Request Forgery (CSRF) in pimcore/demo
Description Pimcore is vulnerable to Cross-site request forgery. It is possible to add arbitrary products to the victim's cart. Proof of Concept 1: Open https://demo.pimcore.fun/en/cart/add-to-cart?id=12 on a browser. 2: Check out the cart with Jaguar E-Type product. Impact Attackers might fool...
Cross-Site Request Forgery (CSRF) in i-love-flamingo/flamingo-commerce
Description CSRF in cart related endpoints. This include: - Adding items to cart - Clean cart - Delete item from cart - Update cart This happens because the system use GET request for these actions and thus allows CSRF attacks. Proof of Concept 1. Access this link in a browser...
Maian-Cart 3.8 - Remote Code Execution (Unauthenticated) Exploit
Exploit title: Maian-Cart 3.8 - Remote Code Execution RCE Unauthenticated Tested on: Ubuntu 20.04 LTS Exploit Authors: DreyAnd, purpl3 Software Link: https://www.maiancart.com/download.html Vendor homepage: https://www.maianscriptworld.co.uk/ Version: Maian Cart 3.8 CVE: CVE-2021-32172...
Maian-Cart 3.8 Remote Code Execution
Exploit title: Maian-Cart 3.8 - Remote Code Execution RCE Unauthenticated Date: 27.11.2020 19:35 Tested on: Ubuntu 20.04 LTS Exploit Authors: DreyAnd, purpl3 Software Link: https://www.maiancart.com/download.html Vendor homepage: https://www.maianscriptworld.co.uk/ Version: Maian Cart 3.8 CVE:...
Maian-Cart 3.8 - Remote Code Execution (RCE) (Unauthenticated)
Exploit title: Maian-Cart 3.8 - Remote Code Execution RCE Unauthenticated Date: 27.11.2020 19:35 Tested on: Ubuntu 20.04 LTS Exploit Authors: DreyAnd, purpl3 Software Link: https://www.maiancart.com/download.html Vendor homepage: https://www.maianscriptworld.co.uk/ Version: Maian Cart 3.8 CVE:...
CVE-2021-32172
Maian Cart v3.8 contains a preauthorization remote code execution RCE exploit via a broken access control issue in the Elfinder plugin...
CVE-2021-32172
Maian Cart v3.8 contains a preauthorization remote code execution RCE exploit via a broken access control issue in the Elfinder plugin...
CVE-2021-32172
Maian Cart v3.8 contains a preauthorization remote code execution RCE exploit via a broken access control issue in the Elfinder plugin...
Improper access control
Maian Cart v3.8 contains a preauthorization remote code execution RCE exploit via a broken access control issue in the Elfinder plugin...
CVE-2021-32172
The e-commerce system Maian Cart (versions 3.0 to 3.8 ) is vulnerable to Remote Code Execution (RCE) due to a broken access control issue in the Elfinder file manager plugin . An unauthenticated attacker can exploit this flaw to execute arbitrary code on the affected system. Publicly available ex...
CVE-2021-32172
Maian Cart v3.8 contains a preauthorization remote code execution RCE exploit via a broken access control issue in the Elfinder plugin...
PT-2021-19672
Name of the Vulnerable Software and Affected Versions: Maian Cart version 3.8 Description: The issue is related to a preauthorization remote code execution RCE exploit due to a broken access control problem in the Elfinder plugin. This allows for potential remote code execution without proper...
CVE-2021-32172: Missing Authorization
Maian Cart v3.8 contains a preauthorization remote code execution RCE exploit via a broken access control issue in the Elfinder plugin...
Maian Script World Maian Cart security vulnerabilities
Maian Script World Maian Cart is a powerful e-commerce system from Maian Script World, UK. A security vulnerability exists in Maian Cart v3.8, which stems from an access control issue in the Elfinder plugin...
TheCartPress eCommerce Shopping Cart <= 1.5.3.6 - Unauthenticated Arbitrary Admin Account Creation
The tcpregisterandloginajax AJAX action of the plugin allows unauthenticated users to create accounts with an arbitrary role such as admin POST /wp-admin/admin-ajax.php HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8 Accept-Language: en-GB,en;q=0.5...
WordPress Floating Cart plugin <= 1.2.1 - Multiple vulnerabilities
Multiple vulnerabilities Authenticated Arbitrary WordPress Options Change, Read and Deletion / Authenticated User Enumeration / Authenticated Plugin Settings Change, Import and Export were discovered by Jerome Bruandet NinTechNet in WordPress Floating Cart plugin versions = 1.2.1. Solution Update...
CVE-2021-32202
In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation page...
CVE-2021-32202
In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation page...