Amasty Blog Pro for Magento 2 Cross-Site Scripting Vulnerability

Amasty Blog is a website page extension from Amasty. magento2 is an open source PHP e-commerce system. Amasty Blog Pro 2.10.5 before the version for Magento 2 has a cross-site scripting vulnerability , the vulnerability stems from the plugin in the blog post creation function fails to shortconten...

OpenCart SQL Injection Vulnerability (CNVD-2024-30068)

OpenCart is an open source e-commerce system from the OpenCart team in Hong Kong, China. The system provides product reviews, product ratings, product additions and other modules. OpenCart 3.0.3.7 version of the existence of SQL injection vulnerability , an attacker can exploit the vulnerability...

CVE-2022-2682

A vulnerability, which was classified as problematic, has been found in SourceCodester Alphaware Simple E-Commerce System. Affected by this issue is some unknown functionality of the file stockin.php. The manipulation of the argument id with the input '"alert/xss/ leads to cross site scripting. T...

CVE-2022-2678

A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System. It has been declared as critical. This vulnerability affects unknown code of the file adminfeature.php of the component Background Management Page. The manipulation leads to unrestricted upload. The attack can be...

Out-of-bounds

A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System. It has been declared as critical. This vulnerability affects unknown code of the file adminfeature.php of the component Background Management Page. The manipulation leads to unrestricted upload. The attack can be...

CVE-2022-2682

CVE-2022-2682 affects SourceCodester Alphaware Simple E-Commerce System, specifically the stockin.php/stock.php component. The vulnerability is a cross-site scripting (XSS) flaw triggered by manipulating the id argument (e.g., '">) to inject script code. It can be exploited remotely; the explo...

CVE-2022-2682 SourceCodester Alphaware Simple E-Commerce System stockin.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Alphaware Simple E-Commerce System. Affected by this issue is some unknown functionality of the file stockin.php. The manipulation of the argument id with the input '"alert/xss/ leads to cross site scripting. T...

PT-2022-18087 · Sourcecodester · Sourcecodester Alphaware Simple E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester Alphaware Simple E-Commerce System affected versions not specified Description: A problematic issue has been found in the software, affecting some unknown functionality of the file stockin.php. The manipulation of the id argume...

PT-2022-19293 · Spryker · Spryker Commerce Os

Name of the Vulnerable Software and Affected Versions: Spryker Commerce OS version 1.4.2 Description: The issue allows for Remote Command Execution. Recommendations: For Spryker Commerce OS version 1.4.2, at the moment, there is no information about a newer version that contains a fix for this...

Spryker Commerce OS 操作系统命令注入漏洞

Spryker Commerce OS is a B2B, B2C and Marketplace solution from Spryker Germany. A security vulnerability exists in Spryker Commerce OS version 1.4.2 that originates from allowing an attacker to perform remote command execution...

Newbee-mall code issue vulnerability

newbee-mall is an e-commerce system. newbee-mall v1.0.0 has a security vulnerability that can be exploited by attackers to upload arbitrary files via the upload function of /admin/goods/edit...

CVE-2020-21139

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add...

CVE-2020-21139

EC Cloud E-Commerce System v1.3 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that lets an attacker add admin accounts via the URL /admin.html?do=user&act=add. The issue hinges on unauthorized state-changing requests being performed with a user’s browser session without proper ...

Arbitrary file read vulnerability exists in ShopXO (CNVD-2021-57330)

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Ec-Cube cross-site scripting vulnerability (CNVD-2021-46279)

Ec-cube is an open source e-commerce system of the Japanese company Ec-cube . A cross-site scripting vulnerability exists in Ec-Cube, which can be exploited by a remote attacker to inject specially crafted scripts into specific input fields of an EC website created using EC-Cube and execute...

File Upload Vulnerability in Merchant Management System of Xiamen Lionfish Network Technology Co.

Xiamen Lionfish Network Technology Co., Ltd. is an Internet innovation model software products and solutions as the core, mainly focusing on e-commerce system development and business solutions for high-tech enterprises. There is a file upload vulnerability in the merchant management system of...

Command Execution Vulnerability in CRMEB Min Open Source Mall

CRMEB Min open source mall is a front and back end separation of open source e-commerce system . A command execution vulnerability exists in CRMEB Min Open Source Mall. An attacker can exploit this vulnerability to obtain server administrative privileges...

EC-CUBE cross-site scripting vulnerability (CNVD-2021-34683)

Ec-cube is an open source e-commerce system of the Japanese company Ec-cube . A cross-site scripting vulnerability exists in EC-CUBE versions 4.0.0 through 4.0.5. The vulnerability stems from a program that allows remote attackers to inject specially crafted script into specific input fields of E...

XMall has an information leakage vulnerability

XMall is based on SpringBoot MyBatis e-commerce system , including the front mall system and backend management system . XMall has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

A3MALL e-commerce system open source version of unauthorized access vulnerability

A3MALL e-commerce system open source version is an open source free mall system. A3MALL e-commerce system open source version of unauthorized access vulnerability , attackers can use the vulnerability to obtain sensitive information...