PT-2023-17074 · Unknown · Simple/Beautiful Shopping Cart System

Name of the Vulnerable Software and Affected Versions: Simple and Beautiful Shopping Cart System version 1.0 Description: A critical issue has been found in the file uploadera.php, allowing for unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop tshirtecommerce version 2.1.4, which stems from the ability to...

Simple and Beautiful Shopping Cart System 代码问题漏洞

Simple and Beautiful Shopping Cart System is an e-commerce platform. A code issue exists in version 1.0 of the Simple and Beautiful Shopping Cart System, which stems from a security issue with an unknown function in the file uploadera.php that results in unrestricted uploads...

VulnCheck KEV: CVE-2023-27638

An issue was discovered in the tshirtecommerce aka Custom Product Designer component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised tshirtecommercedesigncartid GET parameter in order to exploit an insecure parameter in the functions hookActionCartSave and...

WordPress Cart Lift Plugin <= 3.1.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Cart Lift Type Plugin Vulnerable versions = 3.1.3 Fixed in 3.1.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 468e4b8c6ecf Credits István Márton Required...

CVE-2023-1497

A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. It has been rated as critical. This issue affects some unknown processing of the file uploaderm.php. The manipulation of the argument submit leads to unrestricted upload. The attack may be initiated remotely. Th...

Out-of-bounds

A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. It has been rated as critical. This issue affects some unknown processing of the file uploaderm.php. The manipulation of the argument submit leads to unrestricted upload. The attack may be initiated remotely. Th...

CVE-2023-1497 SourceCodester Simple and Nice Shopping Cart Script uploaderm.php unrestricted upload

A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. It has been rated as critical. This issue affects some unknown processing of the file uploaderm.php. The manipulation of the argument submit leads to unrestricted upload. The attack may be initiated remotely. Th...

CVE-2023-1497

The CVE-2023-1497 entry affects SourceCodester Simple and Nice Shopping Cart Script 1.0, specifically the file uploaderm.php handling. Connected documentation confirms a vulnerability where manipulating the submit parameter allows unrestricted file uploads, enabling remote initiation. Multiple so...

PT-2023-17033 · Sourcecodester · Sourcecodester Simple/Nice Shopping Cart Script

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple and Nice Shopping Cart Script version 1.0 Description: A critical issue affects the processing of the file uploaderm.php, where the manipulation of the submit argument leads to unrestricted upload. The attack can be...

Simple and Nice Shopping Cart Script 代码问题漏洞

Simple and Nice Shopping Cart Script is simple and nice PHP shopping cart script. A vulnerability exists in SourceCodester Simple and Nice Shopping Cart Script version 1.0, which stems from a problem with the file uploaderm.php, where the operation of the parameter submit results in unrestricted...

WordPress Ecwid Shopping Cart Plugin <= 6.11.4 is vulnerable to Cross Site Scripting (XSS)

Software Ecwid Shopping Cart Type Plugin Vulnerable versions = 6.11.4 Fixed in 6.11.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24408 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7c6c8f1f1f87 Credits István Márton...

CVE-2023-1431

The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due to the plugin saving shopping cart data exports in a publicly accessible location /wp-content/plugins/wordpress-simple-paypal-shopping-cart/includes/admin/...

CVE-2023-1431

The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due to the plugin saving shopping cart data exports in a publicly accessible location /wp-content/plugins/wordpress-simple-paypal-shopping-cart/includes/admin/...

Code injection

The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due to the plugin saving shopping cart data exports in a publicly accessible location /wp-content/plugins/wordpress-simple-paypal-shopping-cart/includes/admin/...

CVE-2023-1431

CVE-2023-1431 (WP Simple Shopping Cart) affects WordPress WP Simple Shopping Cart plugins

WordPress Simple Shopping Cart Plugin <= 4.6.3 is vulnerable to Sensitive Data Exposure

Software Simple Shopping Cart Type Plugin Vulnerable versions = 4.6.3 Fixed in 4.6.4 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-1431 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 471aef51a29f Credits Ayoub Safa Required...

WP Simple Shopping Cart 4.6.3 - Unauthenticated PII Disclosure

The plugin saves exported shopping cart data in a publicly accessible directory, allowing unauthenticated users to retrieve PII such as full names, email/IP address etc...

WordPress Plugin WP Simple Shopping Cart 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WP Simple...

WordPress Cart Notices for WooCommerce Plugin <= 3.5.7.6 is vulnerable to Broken Access Control

Software Cart Notices for WooCommerce Type Plugin Vulnerable versions = 3.5.7.6 Fixed in 3.5.7.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-45813 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 2ae701f8b679 Credits István Márto...