CVE-2013-3651

CVE-2013-3651 PoC - EC-CUBE 2 Usage Requirements Python 3 Execution $ python poccve20133651.py - e.g. $ python poccve20133651.py http://127.0.0.1:9000/ Result: Vulnerable! PoC Vulnerability | EC-CUBE, an open platform for building and renewing e-commerce sites...

CVE-2025-29722

🛡️ CVE-2025-29722 – Cross Site Request Forgery CSRF in Commercify v1.0 Discovered by: David P.S Abraham aka Davycipher CVE ID CVE-2025-29722 has been assigned to this vulnerability by MITRE Corporation. Summary A CSRF vulnerability was identified in Commercify v1.0 , an open-source e-commerce...

EUVD-2026-105970

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Commerce Server. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Platform...

CVE-2026-101560

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Commerce Server. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Platform...

CVE-2026-101560

The Oracle Commerce Platform (component: Dynamo Commerce Server ) is affected by a vulnerability in version 11.4.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the platform. Successful exploitation may lead to unauthorized creation, deletion,...

CVE-2026-18205

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Reflected XSS. This issue affects Ticimax E-Commerce Platform: through 2026-09-02...

CVE-2026-18205

The Ticimax E-Commerce Platform developed by Ticimax Informatics Technologies Inc. is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. This issue is caused by the improper neutralization of input during web page generation. An attacker could potentially execute malicious scripts in a us...

CVE-2026-18205 XSS in Ticimax Informatics' Ticimax E-Commerce Platform

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Reflected XSS. This issue affects Ticimax E-Commerce Platform: through 2026-09-02...

EUVD-2026-104962

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Reflected XSS. This issue affects Ticimax E-Commerce Platform: through 2026-09-02...

CVE-2026-18205 XSS in Ticimax Informatics' Ticimax E-Commerce Platform

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Reflected XSS. This issue affects Ticimax E-Commerce Platform: through 2026-09-02...

PT-2026-118355

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Reflected XSS. This issue affects Ticimax E-Commerce Platform: through 2026-10-20...

PT-2026-119242

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Commerce Server. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce Platform...

Ticimax E-Commerce Platform cross-site scripting vulnerability

The Ticimax E-Commerce Platform versions 2026-09-02 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to reflected cross-site scripting attacks...

Oracle Commerce Platform security vulnerabilities

Oracle Commerce Platform 11.4.0 has security vulnerabilities. These vulnerabilities stem from issues with the Dynamo Commerce Server component. They may allow low-privilege attackers with network HTTP access rights to unauthorizedly create, delete, or modify critical data or all accessible data, ...

Vulnerabilities in Oracle Commerce Platform

Oracle has identified 27 vulnerabilities in its Commerce Platform, including Oracle Commerce Guided Search and Oracle Commerce Experience Manager, as well as components like Experience Manager, Forge, and Endeca Application Controller. These vulnerabilities concern various security issues in Orac...

CVE-2026-5800 Reflected XSS in Dayneks Software's E-Commerce Platform

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...

CVE-2026-5800

CVE-2026-5800 is a Reflected XSS vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform , caused by improper neutralization of input during web page generation. It affects versions through 28082026 . The CVSS 3.1 score is 6.1 (MEDIUM) with a changed scope, requiring user in...

EUVD-2026-67722

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...

CVE-2026-5800: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...

PT-2026-83136

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...