CVE-2023-43149

CVE-2023-43149 लेखक : Aitor Herrero Fuentes विक्रेता: SPA-Cart विक्रेता होमपेज: https://spa-cart.com/ सॉफ्टवेयर लिंक: https://demo.spa-cart.com/admin संस्करण: 1.9.0.3 परीक्षित पर: Windows 10 Pro CSRF मूल खाता जोड़ें क्रॉस साइट रिक्वेस्ट फोर्जरी कमजोरी एप्लिकेशन demo.spa-cart.com में एक दूरस्थ...

CVE-2023-43148

CVE-2023-43148 Autor : Aitor Herrero Fuentes Anbieter: SPA-Cart Anbieter-Homepage: https://spa-cart.com/ Software-Link: https://demo.spa-cart.com/admin Version: 1.9.0.3 Getestet auf: Windows 10 Pro CSRF – Alle Konten löschen Die Cross-Site-Request-Forgery-Schwachstelle in der Anwendung...

cart

CaRT Komprimierter und RC4-Transport Das CaRT-Dateiformat wird verwendet, um Malware und die zugehörigen Metadaten zu speichern/zu übertragen. Es entschärft die Malware, sodass sie nicht ausgeführt werden kann, und verschlüsselt sie, sodass Antivirensoftware die CaRT-Datei nicht als Malware...

CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS

CVE-2021-27190 - PEEL Shopping, carrello e-commerce - Vulnerabilità di Cross-Site Scripting persistente in 'Address' Data 2021-02-11 Autore dell'exploit Anmol K Sachan Homepage del fornitore https://www.peel.fr/ Link del software https://www.peel.fr/nos-offres-1/peel-shopping-31.html...

CVE-2021-26121

CS-Cart templates.manage Vulnerabilità di esecuzione di codice remoto tramite Server Side Template Injection Trovato da: Steven Seeley di 360 Vulcan Team Versione: = 4.12.x ultima Data: 2021-01-08 12:49 CVE: CVE-2021-26121 Cronologia della divulgazione 2021-01-26 – Inviato al team di sviluppo di...

CVE-2024-50968

CVE-2024-50968 Beschreibung Es besteht eine Schwachstelle in der Geschäftslogik der Funktion "In den Warenkorb" des itsourcecode Agri-Trading Online Shopping System 1.0, die es entfernten Angreifern ermöglicht, den quant-Parameter beim Hinzufügen eines Produkts zum Warenkorb zu manipulieren. Durc...

CVE-2023-2986

CVE-2023-2986 Prova di concetto POC Versione Python di Alucard0x1 Prova di concetto per la vulnerabilità CVE-2023-2986 nel plugin 'Abandoned Cart Lite for WooCommerce' per WordPress in versione Python Crediti https://github.com/Ayantaker/CVE-2023-2986...

CVE-2023-2986

Original Proof of Concept für CVE-2023-2986 Proof of Concept für die Schwachstelle CVE-2023-2986 im Plugin 'Abandoned Cart Lite for WooCommerce' in WordPress Verwandte Details NVD Link : https://nvd.nist.gov/vuln/detail/CVE-2023-2986 Plugin Source :...

CVE-2026-79406

A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor...

EUVD-2026-65486

A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor...

CVE-2024-8949-POC

Vulnerabilità di controllo degli accessi inadeguato scoperta in Sourcecodester Online Eyewear Shopping Website - La manipolazione dell'ID del carrello porta all'aggiunta e alla rimozione indesiderata di articoli nel carrello dell'utente CVE-2024-8949 Venditore: Sourcecodester...

Abandoned Cart Lite for WooCommerce < 5.2.0 - Cross-Site Scripting

The Abandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress are vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 5.1.3 and 7.12.0 respectively, due to insufficient input sanitization and output escaping. i...

Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusion

A directory traversal vulnerability in the Seber Cart comsebercart component 1.0.0.12 and 1.0.0.13 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. id: CVE-2010-1313 info: name: Joomla! Component Sab...

Sunshine Photo Cart <= 3.2.5 - Reflected Cross-Site Scripting

WP Sunshine Sunshine Photo Cart versions up to 3.2.5 contain a reflected cross-site scripting caused by improper input neutralization during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft malicious input. id: CVE-2024-43971...

Sunshine Photo Cart <= 3.1.1 - Reflected Cross-Site Scripting

WP Sunshine Sunshine Photo Cart versions up to 3.1.1 contain a cross-site scripting caused by improper neutralization of input during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft malicious input. id: CVE-2024-30194 info:...

SPA-Cart eCommerce CMS 1.9.0.3 - Cross-Site Scripting

A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /search. The manipulation of the argument filterbrandid/filterprice leads to cross site scripting. The attack may be launched remotely...

CVE-2024-50944

CVE-2024-50944 Descrizione SimplCommerce è affetto da una vulnerabilità di overflow di interi nella logica del carrello, che consente la manipolazione delle quantità di prodotto e dei prezzi totali tramite parametri di quantità artificiosi. Metodo di rilevamento Un attaccante può rilevare questa...

zencart_auth_rce_poc

zencartauthrcepoc CVE-2021-3291 1- accedi come amministratore 2- apri la pagina di modifica di qualsiasi modulo 3- ispeziona l'elemento di qualsiasi radiobox true 4- cambia true in true','MODULEORDERTOTALTOTALSTATUS'; echo id; // 5- clicca su aggiorna 6- per attivare il comando vai di nuovo alla...

CVE-2026-74251

Nicht authentifizierte SQL-Injection über den Attributfilter in Phoca Cart Phoca Cart ≤ 6.1.6 — Nicht authentifizierter Angreifer extrahiert die vollständige Datenbank durch zeitbasierte Blind-Injection ZUSAMMENFASSUNG Die GET-Array-Parameter a Attribut und s Spezifikation der öffentlichen...

CVE-2025-43990-Magento-RCE

Magento APSB25-94 — Caricamento file non autenticato a RCE Panoramica Sfrutta il caricamento di file non autenticato in Magento / Adobe Commerce tramite il caricamento di file customoptions del carrello ospite API REST. Catena d'attacco root@kitploit: 1. GraphQL → leak product SKU 2. REST API →...