CVE-2014-9025

The default checkout completion rule in the commerceorder module in the Drupal Commerce module 7.x-1.x before 7.x-1.10 for Drupal uses the email address as the username for new accounts created at checkout, which allows remote attackers to obtain sensitive information via unspecified vectors...

PT-2014-8795

Name of the Vulnerable Software and Affected Versions Drupal Commerce module versions 7.x-1.x before 7.x-1.10 Description The issue in the commerce order module allows remote attackers to obtain sensitive information via unspecified vectors. This is due to the default checkout completion rule usi...

Change CMS 3.6.8 - Multiple CSRF Vulnerabilities

No description provided by source. Exploit Title: RBS Change Complet Open Source multiple CSRF vulnerabilities POST and GET Date: 10/10/2014 Exploit Author: KrustyHack Vendor Homepage: http://www.rbschange.fr/ Software Link:...

Change CMS 3.6.8 - Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications Exploit Title: RBS Change Complet Open Source multiple CSRF vulnerabilities POST and GET Date: 10/10/2014 Exploit Author: KrustyHack Vendor Homepage: http://www.rbschange.fr/ Software Link:...

Checkout Plugin - File Upload Remote Code Execution

The WordPress Checkout WordPress plugin was affected by a File Upload Remote Code Execution security vulnerability...

CVE-2014-5023

Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command...

Cross site scripting

Cross-site scripting XSS vulnerability in test-plugin.php in the Swipe Checkout for Jigoshop swipe-hq-checkout-for-jigoshop plugin 3.1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter...

PT-2014-5976

Name of the Vulnerable Software and Affected Versions Swipe Checkout for Jigoshop plugin versions 3.1.0 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the api url parameter...

CVE-2014-4557: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in test-plugin.php in the Swipe Checkout for Jigoshop swipe-hq-checkout-for-jigoshop plugin 3.1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter...

CVE-2014-4556

Cross-site scripting XSS vulnerability in test-plugin.php in the Swipe Checkout for eShop plugin 3.7.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in test-plugin.php in the Swipe Checkout for eShop plugin 3.7.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter...

CVE-2014-4556

Cross-site scripting XSS vulnerability in test-plugin.php in the Swipe Checkout for eShop plugin 3.7.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter...

CVE-2014-4556

The CVE-2014-4556 entry concerns the WordPress Swipe Checkout for eShop plugin (versions 3.7.0 and earlier), where a Cross-Site Scripting (XSS) vulnerability exists in test-plugin.php. The underlying issue is that the api_url parameter can be used by remote attackers to inject arbitrary web scrip...

OSCommerce 2.1/2.2 Checkout_Payment.PHP Error Output Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7155/info Error output is not sufficiently sanitized of HTML and script code by osCommerce. This may allow for cross-site scripting attacks as remote users could create a malicious link to a site hosting osCommerce which...

CVE-2014-4556: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in test-plugin.php in the Swipe Checkout for eShop plugin 3.7.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter...

PT-2014-5975

Name of the Vulnerable Software and Affected Versions Swipe Checkout for eShop plugin versions 3.7.0 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the api url paramete...

WordPress Swipe Checkout for Jigoshop Plugin <= 3.1.0 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "apiurl" parameter. Solution Update the plugin...

WordPress Swipe Checkout for eShop Plugin <= 3.7.0 - XSS

Because of this vulnerability in test-plugin.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

CuuMall商城系统v2.3 储存型xss

简要描述： rt 详细说明： 收货地址处 提交订单 。后台 查看时 触发 可打cookie 后台getshell姿势很多。就不多说了。 关键字 ： Power by CuuMall 还是有一定 用户量的 漏洞证明：...

PT-2014-3345

Name of the Vulnerable Software and Affected Versions Ubercart module versions 6.x-2.x through 6.x-2.12 Ubercart module versions 7.x-3.x through 7.x-3.5 Description The issue allows remote attackers to hijack web sessions by leveraging knowledge of the original session ID, specifically when the...