Multiple Vulnerabilities in SuperCom Online Shopping Ecommerce Cart

SuperCom Online Shopping Ecommerce Cart is a web-based apparel sales platform with a user-friendly interface. The vulnerabilities in SuperCom Online Shopping Ecommerce Cart include stored cross-site scripting, cross-site request forgery, and authentication bypass, which can be exploited by...

Express-cart Arbitrary File Upload Vulnerability

express-cart is a shopping cart module for use in Node.js. An arbitrary file upload vulnerability exists in express-cart versions prior to 1.1.7. An attacker can exploit this vulnerability to gain access on a hosted device...

CVE-2018-3758

Unrestricted file upload RCE in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine...

CVE-2018-3758

Unrestricted file upload RCE in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine...

Unrestricted file upload

Unrestricted file upload RCE in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine...

CVE-2018-3758

Unrestricted file upload RCE in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine...

CVE-2018-3758

CVE-2018-3758 affects the express-cart Node.js module (pre-1.1.7). The vulnerability is an unrestricted file upload via the module’s upload functionality. A privileged user can supply an attacker-controlled path and upload arbitrary files (no path/type/size validation), potentially gaining access...

PT-2018-16178 · Express · Express-Cart

Name of the Vulnerable Software and Affected Versions: express-cart versions prior to 1.1.7 Description: The issue allows a privileged user to gain access to the hosting machine through an unrestricted file upload, potentially leading to remote code execution RCE. Recommendations: For versions...

Arbitrary File Upload

express-cart is vulnerable to arbitrary file upload. The vulnerability exists due to a lack of sanity check on the path and size of the uploaded file...

tickets.thefoat.com XSS vulnerability

Open Bug Bounty ID: OBB-625160 Description| Value ---|--- Affected Website:| tickets.thefoat.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

KomSeo Cart 1.3 - my_item_search SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: KomSeo Cart 1.3 - 'edit.php' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor: SITEMAKIN Vendor Homepage: https://sitemakin.com Version: 1.3 Category: Webapps Tested on: Kali linux Description : The vulnerability...

KomSeo Cart 1.3 SQL Injection

Exploit Title: KomSeo Cart 1.3 - 'edit.php' SQL Injection Dork: N/A Date: 25.05.2018 Exploit Author: Azkan Mustafa AkkuA AkkuS Vendor: SITEMAKIN Vendor Homepage: https://sitemakin.com Version: 1.3 Category: Webapps Tested on: Kali linux Description : The vulnerability allows an attacker to inject...

KomSeo Cart 1.3 - my_item_search SQL Injection

KomSeo Cart 1.3 - myitemsearch SQL Injection Exploit Title: KomSeo Cart 1.3 - 'edit.php' SQL Injection Dork: N/A Date: 25.05.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor: SITEMAKIN Vendor Homepage: https://sitemakin.com Version: 1.3 Category: Webapps Tested on: Kali linux Description : T...

KomSeo Cart 1.3 - 'my_item_search' SQL Injection

Exploit Title: KomSeo Cart 1.3 - 'edit.php' SQL Injection Dork: N/A Date: 25.05.2018 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor: SITEMAKIN Vendor Homepage: https://sitemakin.com Version: 1.3 Category: Webapps Tested on: Kali linux Description : The vulnerability allows an attacker to inject...

Karenderia Multiple Restaurant System < 4.5 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Karenderia Multiple Restaurant System 4.5 - Blind SQL injection Google Dork: N/A Date: 2018-05-10 Exploit Author: telahdihapus Email Author: email protected Vendor Homepage: https://codecanyon.net/user/bastikikang Software Link:...

SuperCom Online Shopping Ecommerce Cart 1 - XSS / CSRF / Authentication bypass Vulnerabilities

Exploit for php platform in category web applications Exploit Title: SuperCom Online Shopping Ecommerce Cart 1 - Persistent Cross-Site scripting / Cross site request forgery / Authentication bypass Exploit Author: L0RD Vendor Homepage:...

SuperCom Online Shopping Ecommerce Cart 1 - Persistent Cross-Site scripting Cross site request forgery Authentication bypass

SuperCom Online Shopping Ecommerce Cart 1 - Persistent Cross-Site scripting Cross site request forgery Authentication bypass Exploit Title: SuperCom Online Shopping Ecommerce Cart 1 - Persistent Cross-Site scripting / Cross site request forgery / Authentication bypass Date: 2018-05-17 Exploit...

SuperCom Online Shopping Ecommerce Cart 1 XSS / CSRF / SQL Injection

Exploit Title: SuperCom Online Shopping Ecommerce Cart 1 - Persistent Cross-Site scripting / Cross site request forgery / Authentication bypass Date: 2018-05-17 Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/supercom-online-shopping-ecommerce-cart/17085987?srank=1442 Version: 1...

SuperCom Online Shopping Ecommerce Cart 1 - Persistent Cross-Site scripting / Cross site request forgery / Authentication bypass

Exploit Title: SuperCom Online Shopping Ecommerce Cart 1 - Persistent Cross-Site scripting / Cross site request forgery / Authentication bypass Date: 2018-05-17 Exploit Author: L0RD Vendor Homepage: https://codecanyon.net/item/supercom-online-shopping-ecommerce-cart/17085987?srank=1442 Version: 1...

shop.instaluj.cz XSS vulnerability

Open Bug Bounty ID: OBB-613195 Description| Value ---|--- Affected Website:| shop.instaluj.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...