Lucene search
+L

6043 matches found

Packet Storm
Packet Storm
•added 2021/01/14 12:00 a.m.•224 views

Online Shopping Cart 1.0 SQL Injection

Exploit Title: Online Shopping Cart System 1.0 - 'id' SQL Injection Date: 14.1.2021 Exploit Author: Aydın Baran Ertemir Vendor Homepage: https://www.sourcecodester.com/php/14668/online-shopping-cart-system-php-full-source-code.html Software Link:...

SaveExploits0
Exploit DB
Exploit DB
•added 2021/01/14 12:00 a.m.•249 views

Online Shopping Cart System 1.0 - 'id' SQL Injection

Exploit Title: Online Shopping Cart System 1.0 - 'id' SQL Injection Date: 14.1.2021 Exploit Author: Aydın Baran Ertemir Vendor Homepage: https://www.sourcecodester.com/php/14668/online-shopping-cart-system-php-full-source-code.html Software Link:...

5.3AI score
SaveExploits0
CNVD
CNVD
•added 2020/12/21 12:00 a.m.•17 views

S-cart Cross-Site Scripting Vulnerability

S-cart is a Php-based e-commerce management platform for the S-cart community. A cross-site scripting vulnerability exists in s-cart core before version 4.4, which stems from vulnerability to administration panel cross-site scripting XSS attacks. An attacker can exploit the vulnerability to execu...

7.3CVSS6.1AI score0.01085EPSS
SaveExploits1References1
Veracode
Veracode
•added 2020/12/16 1:53 a.m.•30 views

Cross-site Scripting (XSS)

s-cart is vulnerable to cross-site scirpting XSS. An attacker is able to inject and execute malicious script via the search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex...

7.2CVSS2.8AI score0.00883EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2020/12/15 4:15 p.m.•21 views

CVE-2020-28457

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS...

7.2CVSS6.9AI score0.00883EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2020/12/15 4:15 p.m.•29 views

CVE-2020-28457

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS...

4.8CVSS6.7AI score
SaveExploits0References4
Prion
Prion
•added 2020/12/15 4:15 p.m.•34 views

Cross site scripting

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS...

3.5CVSS5.1AI score0.00883EPSS
SaveExploits1References4Affected Software1
Prion
Prion
•added 2020/12/15 4:15 p.m.•32 views

Cross site scripting

The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting XSS via the admin panel...

4.3CVSS6AI score0.01085EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2020/12/15 3:35 p.m.•38 views

CVE-2020-28456 Cross-site Scripting (XSS)

The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting XSS via the admin panel...

7.3CVSS6.2AI score0.01085EPSS
SaveExploits1References4
Mend
Mend
•added 2020/12/15 3:35 p.m.•5 views

CVE-2020-28456

The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting XSS via the admin panel...

7.3CVSS0.01085EPSS
SaveExploits1References3
CVE
CVE
•added 2020/12/15 3:35 p.m.•62 views

CVE-2020-28456

The CVE-2020-28456 entry affects s-cart/core before version 4.4, with a Cross-site Scripting (XSS) vulnerability exploitable via the admin panel. The root cause is improper handling of input in the admin interface, enabling injection of client-side code. Impact is client-side script execution, po...

7.3CVSS6.1AI score0.01085EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2020/12/15 3:35 p.m.•15 views

CVE-2020-28457

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS...

7.2CVSS0.00883EPSS
SaveExploits1References3
CVE
CVE
•added 2020/12/15 3:35 p.m.•68 views

CVE-2020-28457

The CVE-2020-28457 entry is backed by concrete data across sources: it affects the Laravel-based e-commerce package s-cart/core up to version 4.3.x and is triggered by a XSS in the admin dashboard search (AdminOrderController.phpindex) . The vulnerability allows injection of malicious scripts via...

7.2CVSS6.2AI score0.00883EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2020/12/15 12:00 a.m.•21 views

S-cart 跨站脚本漏洞

S-cart is a Php-based e-commerce management platform for the S-cart community. A cross-site scripting vulnerability exists in s-cart core before version 4.4, which stems from vulnerability to administration panel cross-site scripting XSS attacks. An attacker can exploit the vulnerability to execu...

7.3CVSS6.3AI score0.01085EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2020/12/15 12:00 a.m.•25 views

S-cart Cross-Site Scripting Vulnerability

S-cart is a Php-based e-commerce management platform from the S-cart community. A cross-site scripting vulnerability exists in s-cart core before version 4.4, which stems from a lack of detection of client-side input in the search function of the admin dashboard in...

7.2CVSS6.4AI score0.00883EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/15 12:00 a.m.•10 views

CVE-2020-28456: Improper Neutralization of Input During Web Page Generation

The package s-cart/core before 4.4 are vulnerable to Cross-site Scripting XSS via the admin panel...

7.3CVSS5.8AI score0.01085EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/15 12:00 a.m.•8 views

CVE-2020-28457: Improper Neutralization of Input During Web Page Generation

This affects the package s-cart/core before 4.4. The search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex is vulnerable to XSS...

7.2CVSS5.8AI score0.00883EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/12/15 12:00 a.m.•7 views

PT-2020-17014

Name of the Vulnerable Software and Affected Versions s-cart/core versions prior to 4.4 Description The search functionality of the admin dashboard in the file core/src/Admin/Controllers/AdminOrderController.php is vulnerable to XSS. This issue affects the package s-cart/core. Recommendations For...

7.2CVSS0.00883EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2020/12/15 12:00 a.m.•8 views

PT-2020-17013

Name of the Vulnerable Software and Affected Versions s-cart/core versions prior to 4.4 Description The issue concerns Cross-site Scripting XSS that can be exploited via the admin panel. Recommendations For versions prior to 4.4, update to version 4.4 or later to resolve the issue...

7.3CVSS0.01085EPSS
SaveExploits1References6
NVD
NVD
•added 2020/12/11 3:15 p.m.•38 views

CVE-2020-28838

Cross Site Request Forgery CSRF in CART option in OpenCart Ltd. Opencart CMS 3.0.3.6 allows attacker to add cart items via Add to cart...

3.5CVSS4AI score0.00389EPSS
SaveExploits1References2
Rows per page
Query Builder