6042 matches found
Shopware 5.3.7 Cross Site Request Forgery
Advisory: Shopware Cart Accessible by Third-Party Websites RedTeam Pentesting discovered that the shopping cart implemented by Shopware offers an insecure API. Malicious, third-party websites may abuse this API to list, add or remove products from a user's cart. Details ======= Product: Shopware...
CVE-2017-12415
OXID eShop Community Edition before 6.0.0 RC2 development, 4.10.x before 4.10.5 maintenance, and 4.9.x before 4.9.10 legacy, Enterprise Edition before 6.0.0 RC2 development, 5.2.x before 5.2.10 legacy, and 5.3.x before 5.3.5 maintenance, and Professional Edition before 6.0.0 RC2 development, 4.9....
CVE-2017-12415
OXID eShop Community Edition before 6.0.0 RC2 development, 4.10.x before 4.10.5 maintenance, and 4.9.x before 4.9.10 legacy, Enterprise Edition before 6.0.0 RC2 development, 5.2.x before 5.2.10 legacy, and 5.3.x before 5.3.5 maintenance, and Professional Edition before 6.0.0 RC2 development, 4.9....
Cross site request forgery (csrf)
OXID eShop Community Edition before 6.0.0 RC2 development, 4.10.x before 4.10.5 maintenance, and 4.9.x before 4.9.10 legacy, Enterprise Edition before 6.0.0 RC2 development, 5.2.x before 5.2.10 legacy, and 5.3.x before 5.3.5 maintenance, and Professional Edition before 6.0.0 RC2 development, 4.9....
CVE-2017-12415: Cross-Site Request Forgery (CSRF)
OXID eShop Community Edition before 6.0.0 RC2 development, 4.10.x before 4.10.5 maintenance, and 4.9.x before 4.9.10 legacy, Enterprise Edition before 6.0.0 RC2 development, 5.2.x before 5.2.10 legacy, and 5.3.x before 5.3.5 maintenance, and Professional Edition before 6.0.0 RC2 development, 4.9....
PT-2018-5400
Name of the Vulnerable Software and Affected Versions: OXID eShop Community Edition versions 4.9.x through 4.9.9 and 4.10.x through 4.10.4 OXID eShop Enterprise Edition versions 5.2.x through 5.2.9 and 5.3.x through 5.3.4 OXID eShop Professional Edition versions 4.9.x through 4.9.9 and 4.10.x...
Cart Engine 7.0.0 Build 20180202 Database Disclosure
============================================================================================================================ | Title : Cart Engine Version: 7.0.0 build 20180202 Database Disclosure Vulnerability | | Author : indoushka | | Telegram : @indoushka | | Tested on : Win 10 X64 /FrPro | |...
X-Cart < 4.1.3 - Arbitrary Variable Overwrite Vulnerability
Exploit for php platform in category web applications X-Cart Arbitrary Variable Overwrite Vendor: Qualiteam Product: X-Cart Version: $value $$var = $value; As we can see every single post variable is dynamically evaluated. This is especially dangerous because register globals and magic q...
terabyteunlimited.com XSS vulnerability
Open Bug Bounty ID: OBB-527748 Description| Value ---|--- Affected Website:| terabyteunlimited.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosu...
Bonza Digital Cart Script 1 Cross Site Scripting
============================================================================================================================ | Title : Bonza Digital Cart Script version 1 XSS Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on : windows 10 FranASSais V.Pro | |...
Joomla Jtag Minicart 4.1.0 SQL Injection
Title: Joomla Jtag Minicart 4.1.0 - SQL injection Credit: Bilal KARDADOU Vendor: https://joomlatag.com URL: https://extensions.joomla.org/extensions/extension/e-commerce/shopping-cart/jtag-minicart/ Product: 'Joomla Jtag Minicart 4.1.0' Developer: JoomlaTag Last updated: Jun 06 2016 Compatibility...
CVE-2015-3302
TheCartPress WordPress plugin (TheCartPress, aka The Professional WordPress eCommerce Plugin) for WordPress is affected by CVE-2015-3302. The vulnerability arises from a broken authentication mechanism that permits non-authenticated users to access sensitive order data due to improper access cont...
PHP Scripts Mall PHP Multivendor Ecommerce Cross-Site Scripting Vulnerability (CNVD-2018-00082)
PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. A cross-site scripting vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce. The vulnerability can be exploited to...
CVE-2015-3302: Improper Access Control
The TheCartPress eCommerce Shopping Cart aka The Professional WordPress eCommerce Plugin plugin for WordPress before 1.3.9.3 allows remote attackers to obtain sensitive order detail information by leveraging a "broken authentication mechanism."...
PHP Scripts Mall PHP Multivendor Ecommerce SQL Injection Vulnerability (CNVD-2018-00078)
PHP Multivendor Ecommerce is a shopping cart software from PHP Scripts Mall built on the PHP platform that allows sellers to easily customize and sell their products. PHP Scripts Mall PHP Multivendor Ecommerce suffers from a SQL injection vulnerability. The vulnerability can be exploited by an...
CVE-2017-17951
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter...
Code injection
PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter...
CVE-2017-17951
PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter...