CVE-2023-26688

Cross Site Scripting XSS vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the productdata parameter of add/edit product in the administration interface...

CVE-2023-26686

CVE-2023-26686 : CS-Cart MultiVendor 4.16.1 has a file-upload vulnerability in the image upload feature used during shop customization, enabling remote attackers to execute arbitrary code. The root cause is not explicitly detailed beyond noting a file upload flaw; no exploitation specifics or mit...

CVE-2023-26686

File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the image upload feature when customizing a shop...

CVE-2023-26688

CVE-2023-26688 pertains to CS-Cart MultiVendor 4.16.1, where a Cross Site Scripting (XSS) flaw exists in the administration interface. The vulnerability is triggered via the product_data parameter in the add/edit product workflow, potentially allowing remote attackers to execute arbitrary code. T...

WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Sunshine Photo Cart versions = 3.2.9...

WordPress Sunshine Photo Cart Plugin <= 3.2.9 is vulnerable to Broken Access Control

Software Sunshine Photo Cart Type Plugin Vulnerable versions = 3.2.9 Fixed in 3.2.10 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-44038 Patch priority Low CVSS severity Low 5.3 Developer WP Sunshine PSID d5d77606eb75 Credits Majed Refaea Required...

VulnCheck KEV: CVE-2021-32172

Maian Cart v3.8 contains a preauthorization remote code execution RCE exploit via a broken access control issue in the Elfinder plugin...

CVE-2024-43971

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Sunshine Sunshine Photo Cart allows Reflected XSS.This issue affects Sunshine Photo Cart: from n/a through 3.2.5...

CVE-2024-43971

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through = 3.2.5...

CVE-2024-43971

CVE-2024-43971 refers to WP Sunshine Sunshine Photo Cart (WordPress) versions up to 3.2.5 and describes a reflected XSS caused by improper input neutralization during web page generation. Exploitation requires an attacker to craft malicious input, enabling execution of arbitrary scripts in a user...

CVE-2024-43971 WordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through = 3.2.5...

CVE-2024-43971 WordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through = 3.2.5...

CVE-2024-8949

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cartid/id leads to improper ownership management. It is possible to...

CVE-2024-8949

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cartid/id leads to improper ownership management. It is possible to...

CVE-2024-8949 SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership management

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cartid/id leads to improper ownership management. It is possible to...

CVE-2024-8949 SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership management

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cartid/id leads to improper ownership management. It is possible to...

CVE-2024-8949

Affected software: SourceCodester Online Eyewear Shop 1.0. Vulnerable component/file: Cart Content Handler, specifically the unknown part of /classes/Master.php. Root cause: manipulation of the argument cart_id/id leading to improper ownership management. Impact: remote initiation possible; explo...

PT-2024-39334 · Unknown · Sourcecodester Online Eyewear Shop

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Eyewear Shop version 1.0 Description: A critical vulnerability has been found in the Cart Content Handler component of the SourceCodester Online Eyewear Shop. This issue affects an unknown part of the file...

PT-2024-30834

Name of the Vulnerable Software and Affected Versions WP Sunshine Sunshine Photo Cart versions 3.2.5 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations...

Online Eyewear Shop 安全漏洞

Online Eyewear Shop is an online eyewear store by the individual developer Carlo Montero. A security vulnerability exists in Online Eyewear Shop version 1.0, which stems from an unknown part of the Cart Content Handler component, where the manipulation of the parameter cartid/id results in improp...