Simple and Nice Shopping Cart Script Code Issue Vulnerability

Simple and Nice Shopping Cart Script is simple and nice PHP shopping cart script. A security vulnerability exists in Simple and Nice Shopping Cart Script v.1.0, which originates from a file upload vulnerability. The vulnerability can be exploited to execute arbitrary code via the edit profile...

CVE-2023-44061

The CVE-2023-44061 entry concerns the Simple and Nice Shopping Cart Script v1.0. A vulnerability in the upload function of the edit profile component enables a remote attacker to execute arbitrary code. This is described with a CVSS v3.1 base score of 8.8 (HIGH) with network attack vector, low at...

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

CVE-2023-44061

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component...

WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)

Software Abandoned Cart Lite for WooCommerce Type Plugin Vulnerable versions = 5.15.2 Fixed in 5.16.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-44986 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3d15bd807ee2 Credits Robert DeVore...

CVE-2023-43714

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "SKIPCARTPAGETITLE1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

CVE-2023-43739

The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-43739

The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

Sql injection

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

PHP Shopping Cart SQL Injection Vulnerability

PHP Shopping Cart is Phpjabbers open source a shopping cart system . PHP Shopping Cart 4.2 version has a security vulnerability , the vulnerability stems from the parameter id SQL injection vulnerability...

PT-2023-28755 · Phpjabbers · Phpjabbers Php Shopping Cart

Name of the Vulnerable Software and Affected Versions: Phpjabbers PHP Shopping Cart version 4.2 Description: The issue is related to SQL Injection via the id parameter. This allows for potential exploitation. No information is provided about the estimated number of potentially affected devices...

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter in its SQL queries (CVE-2023-43274). The CVSS 3.1 base score is 7.5 (HIGH) with Network attack vector, Low attack complexity, Privileges Required NONE, and impact limited to Confidentiality (HIGH). Exploitation a...

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

CVE-2023-43274

Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter...

PHP Shopping Cart 4.2 SQL Injection Vulnerability

Title: PHP Shopping Cart-4.2 Multiple-SQLi Author: nu11secur1ty Vendor: https://www.phpjabbers.com/ Software:https://www.phpjabbers.com/php-shopping-cart-script/sectionPricing Reference: https://portswigger.net/web-security/sql-injection Description: The id parameter appears to be vulnerable to S...

PHP Shopping Cart 4.2 SQL Injection

Title: PHP Shopping Cart-4.2 Multiple-SQLi Author: nu11secur1ty Date: 09/13/2023 Vendor: https://www.phpjabbers.com/ Software:https://www.phpjabbers.com/php-shopping-cart-script/sectionPricing Reference: https://portswigger.net/web-security/sql-injection Description: The id parameter appears to b...

SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection

Exploit Title: SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection Exploit Author: CraCkEr Date: 20/08/2023 Vendor: SPA-Cart Vendor Homepage: https://spa-cart.com/ Software Link: https://demo.spa-cart.com/ Version: 1.9.0.3 Tested on: Windows 10 Pro Impact: Database Access CVE: CVE-2023-4548 CWE: CWE-8...