4890 matches found
CVE-2017-12984
PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/messageupdate.php...
CVE-2017-12984
PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/messageupdate.php...
CVE-2017-10192
Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: Shopping Cart. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2017-10192
Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: Shopping Cart. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
Design/Logic Flaw
Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: Shopping Cart. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
ShopsN v2.0 frontend CartController.class.php file order_form function has SQL injection vulnerability
ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co. An open source online store in line with enterprise-class commercial standards of the whole network system. In ShopsN v2.0 beta2 version of the front-end CartController.class.php in the orderform functi...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2017-2138
Cross-site request forgery CSRF vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2017-2138
Cross-site request forgery CSRF vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2017-2138
CVE-2017-2138 affects CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2/v3) and CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2/v3). It is a cross-site request forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of administrators ...
CVE-2017-2138
Cross-site request forgery CSRF vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
PT-2017-15203 · Cs Cart · Cs-Cart Japanese Edition +1
Name of the Vulnerable Software and Affected Versions: CS-Cart Japanese Edition versions 4.3.10 and earlier excluding v2 and v3 CS-Cart Multivendor Japanese Edition versions 4.3.10 and earlier excluding v2 and v3 Description: A cross-site request forgery CSRF issue allows remote attackers to hija...
Oracle iStore Remote Vulnerability
Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Oracle iStore is one of the ability to allow merchant...
CS-Cart Japanese Edition and Multivendor Japanese Edition Unrestricted Access Vulnerability
CS-Cart Japanese Edition is a PHP and MySQL based e-commerce software system developed by CS-Cart team. The system supports third-party software extensions, customized promotion strategies, product filter definitions, etc. CS-Cart Multivendor Japanese Edition is an extension of CS-Cart Japanese...
elect-mer.com XSS vulnerability
Vulnerable URL: https://www.elect-mer.com/cart/login.php?ContinueURL=1"...
CVE-2017-10667
In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...
Cross site scripting
In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...
CVE-2017-10667
In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...
CVE-2017-10667
Zen Cart 1.6.0 is affected by a cross-site scripting (XSS) vulnerability in index.php where the products_id parameter can be used to inject script. The provided documents confirm the issue but do not include exploitation details, affected versions beyond Zen Cart 1.6.0, or specific root-cause cod...