my.tomtop.com XSS vulnerability

Vulnerable URL: https://my.tomtop.com/checkout/order/tracking Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...

simplycombo.com XSS vulnerability

Vulnerable URL: https://www.simplycombo.com/checkout/?paymentsuccpage=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3Elandingpage=/my-contentname=Simply%20Combosubmitted=Y=https%3A//www.simplycombo.com/checkout/=buynowlastupsell=YESgateway=stripe=Y=Y=N Details: Description| Value ---|--- Patched:| No...

mihanstore.co XSS vulnerability

Vulnerable URL: http://www.mihanstore.co/cart.php?step=checkout Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 266609 VIP website status:| No Check mihanstore.co SSL connection:| Grade: F Coordinated Disclosure...

actionmoments.com XSS vulnerability

Vulnerable URL: https://www.actionmoments.com/checkout.php?cf=FC="="&welcome.x;=0&welcome.y;=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5412923 VIP website status:| No Check...

Wirecard Checkout Page 1.0 Price Manipulation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2015-061 Product: Wirecard Checkout Page Manufacturer: Wirecard AG Affected Versions: 1.0 Tested Versions: 1.0 Vulnerability Type: Improper Validation of Integrity Check Value CWE-354 Risk Level: High Solution Status: Fixed...

loboo.se XSS vulnerability

Vulnerable URL: http://www.loboo.se/checkout.asp?CartID=="=C7805CS=0'A=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 2 VIP website...

Unfixed XSS vulnerability at www.emagic.co.uk

Security researcher nullbyt3, has submitted on 10/07/2010 a cross-site-scripting XSS vulnerability affecting www.emagic.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently...

jCart 1.1 Cross Site Request Forgery / Cross Site Scripting

additem$itemid, $itemqty, $itemprice, $itemname; ------------------------- User-supplied input for variable $itemname isn't properly escaped. Proof-of-Concept: -- alertdocument.cookie" type="hidden" document.getElementById'payload'.click...