SQL injection vulnerability in the al***.cl***.php file of the UQCMS cloud commerce system

UQCMS cloud business system is programmed with PHP + MYSQL, the template uses smarty templates, the front and back end is separated from a B2B2C e-commerce software. UQCMS cloud business system al.cl.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain database...

SQL Injection Vulnerability in ECShop Website of Shanghai ShangPai Network Technology Co.

Founded in 2002, Shanghai Shangpai Network Technology Co., Ltd. is a professional e-commerce system and service provider in China. A SQL injection vulnerability exists in the ECShop website of Shanghai ShangPai Network Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Arbitrary File Deletion Vulnerability in iWebShop

iWebShop is an open source WEB e-commerce B2B2C building system based on the HP language and MYSQL database development , using the MVC architecture Yii framework thinking design mode of a product . iWebShop arbitrary file deletion vulnerability , an attacker can use the vulnerability to delete...

File Upload Vulnerability in LaiKe Full Scene E-commerce System

LaiKe full-scene e-commerce system is a WeChat applet e-commerce platform front and back end open source PHP , including distribution , group , lottery , red packets , nine-grid game and other functions , the entire system architecture is very simple , suitable for small teams or individual...

SQL injection vulnerability in uqcms cloud commerce system (CNVD-2020-18781)

uqcms is a lightweight shopping software, light application, light deployment, multiple clients with different presentations.PHP+MySql easy to build, Smarty template tags, two open more convenient. Can be used for free for business. SQL injection vulnerability exists in uqcms cloud commerce syste...

File Upload Vulnerability in Laike E-commerce System (CNVD-2020-13871)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A file upload vulnerability exists in the Laike E-commerce system, which can be exploited by attackers to gain control of the web server...

SQL Injection Vulnerability in the Frontend of Dascommerce Mall System

Big Business Mall System is a business creation network based on ten years of reconstruction of the e-commerce architecture, to create a set of operators, suppliers, purchasers, users, distribution, etc., in the PC and mobile devices are compatible with the operation of a complete set of offline ...

File Upload Vulnerability in Laike E-commerce System (CNVD-2020-01256)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A file upload vulnerability exists in the Laike Ecommerce system, which can be exploited by attackers to upload malicious files...

SQL Injection Vulnerability in Laike E-commerce System (CNVD-2020-01258)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

SQL Injection Vulnerability in Laike E-commerce System

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

SQL injection vulnerability in in***.php file of Laikai e-commerce system (CNVD-2020-00182)

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system in.php file contains a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

Magento Remote Code Execution Vulnerability (CNVD-2019-40728)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A remote code execution vulnerability exists in Magento. An attacker can exploit this vulnerability to execute co...

S-CMS e-commerce system aj***.php page has SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. S-CMS e-commerce system aj.php page has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

S-CMS php version e-mall system v1.5 SQL injection vulnerability in background a**.p** C_** parameter

S-CMS e-commerce system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. S-CMS php version of the e-commerce system v1.5 background a.p C parameter there is a SQL injection vulnerability, the attacker can use t...

XSS Vulnerability in Receiving Address Field of E-commerce System of Kunming Aoyuan Technology Co.

Kunming Aoyuan Technology Co., Ltd. is a high-tech enterprise engaged in system development, website construction and other Internet businesses. There is an XSS vulnerability in the receiving address field of the e-commerce system of Kunming Aoyuan Technology Co. Ltd, which can be exploited by...

Chengdu Renwu Technology Co., Ltd. e-commerce system has a logic flaw vulnerability

Chengdu RenWeiHang Technology Co., Ltd. focuses on enterprise-level e-commerce service technology, and provides various specialized e-commerce solutions and software systems from light application, professional level to platform level for traditional enterprises + Internet. Chengdu RenWeiHang...

Magento Cross-Site Request Forgery Vulnerability (CNVD-2019-26250)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions . A cross-site request forgery vulnerability exists in Magento versions 2.1.18 before 2.1, 2.2.9 before 2.2.2 and...

S-CMS php version e-commerce system v1.5 SQL injection vulnerability in background aj***.php order parameter

Ltd. is mainly engaged in computer software, hardware development and sales, Internet technology development, technical services, network information systems integration, web design, network engineering design, installation, commissioning, maintenance, software outsourcing services. S-CMS php...

Magento cross-site scripting vulnerability (CNVD-2019-26217)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. A cross-site scripting vulnerability exists in Magento Open Source, Magento Commerce and Magento. The vulnerability...

Cloud EC B2C e-commerce system v1.2.4 xss vulnerability in the frontend

Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system V1.2.1 version of the existence of stored XSS vulnerability, an attacker can exploit...