checkout-charlie.com Cross Site Scripting vulnerability OBB-3754061

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WooCommerce Product Attachment < 2.2.0 - Checkout Attachements Update via CSRF

Description The plugin does not have CSRF check when saving checkout attachements, which could allow attackers to make logged in users perform such action via a CSRF attack...

CVE-2023-44024

SQL injection vulnerability in KnowBand Module One Page Checkout, Social Login & Mailchimp supercheckout v.8.0.3 and before allows a remote attacker to execute arbitrary code via a crafted request to the updateCheckoutBehaviour function in the supercheckout.php component...

CVE-2023-44024

SQL injection vulnerability in KnowBand Module One Page Checkout, Social Login & Mailchimp supercheckout v.8.0.3 and before allows a remote attacker to execute arbitrary code via a crafted request to the updateCheckoutBehaviour function in the supercheckout.php component...

CVE-2023-44024

SQL injection vulnerability in KnowBand Module One Page Checkout, Social Login & Mailchimp supercheckout v.8.0.3 and before allows a remote attacker to execute arbitrary code via a crafted request to the updateCheckoutBehaviour function in the supercheckout.php component...

PrestaShop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, SMS alerts and product image zoom. A security vulnerability exists in PrestaShop due to an SQL injection vulnerability in the supercheckout.php component of...

CVE-2023-44024

SQL injection vulnerability in KnowBand Module One Page Checkout, Social Login & Mailchimp supercheckout v.8.0.3 and before allows a remote attacker to execute arbitrary code via a crafted request to the updateCheckoutBehaviour function in the supercheckout.php component...

CVE-2023-44024

CVE-2023-44024 describes an SQL injection in the KnowBand Module One Page Checkout, Social Login & Mailchimp (supercheckout) up to version 8.0.3. The flaw is exploitable via a crafted request to the updateCheckoutBehaviour function in supercheckout.php, enabling remote code execution with no auth...

CVE-2023-41693

Cross-Site Request Forgery CSRF vulnerability in edwardplainview MyCryptoCheckout plugin = 2.125 versions...

The vulnerabilities of the classes DirCacheCheckout, ResolveMerger, PullCommand, and PatchApplier in the Git version control system for the Java Eclipse JGit framework allow a hacker to execute arbitrary code.

The vulnerability of the DirCacheCheckout, ResolveMerger, PullCommand, and PatchApplier classes in the Git version control system for the Java Eclipse JGit framework is related to improper handling of data that is sensitive to registry operations during repository cloning to the file system...

WordPress Checkout Field Editor Plugin < 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Checkout Field Editor Type Plugin Vulnerable versions 1.7.5 Fixed in 1.7.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c60f262bf8c6 Credits foobar7 Required privilege...

DEBIAN-CVE-2023-4759

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

UBUNTU-CVE-2023-4759

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

Eclipse JGit Security Vulnerability

Eclipse JGit is an open source Java implementation of the Eclipse Foundation for working with the Git version control system. A security vulnerability exists in Eclipse JGit 6.6.0 and earlier versions, which stems from the presence of symbolic links in specially crafted git repositories that can...

Checkout Field Editor < 1.7.5 - Checkout Fields Update via CSRF

Description The plugin does not have CSRF check in place when updating checkout fields, which could allow attackers to make logged in users update them via a CSRF attack PoC...

Checkout Field Editor < 1.7.5 - Checkout Fields Update via CSRF

Description The plugin does not have CSRF check in place when updating checkout fields, which could allow attackers to make logged in users update them via a CSRF attack input type="hidden" name="fieldvalidation1" value="req...

WordPress BitPay Checkout for WooCommerce Plugin <= 4.1.0 is vulnerable to Broken Access Control

Software BitPay Checkout for WooCommerce Type Plugin Vulnerable versions = 4.1.0 Fixed in 5.0.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-41803 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 47a5398f9fa9 Credits Mika Required...

CVE-2023-3162

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.7.7. This is due to insufficient verification on the user being supplied during a Stripe checkout through the plugin. This allows unauthenticated attackers to...

WordPress plugin Stripe Payment Plugin for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress WooCommerce One Page Checkout Plugin <= 2.3.0 is vulnerable to Local File Inclusion

Software WooCommerce One Page Checkout Type Plugin Vulnerable versions = 2.3.0 Fixed in 2.4.0 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2023-35881 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID fd24b1111b74 Credits Rafie Muhammad Patchstack...