Ltd. cross-border e-commerce integrated platform has SQL injection vulnerability

Ltd. was founded in 2013 as an information technology service provider. Ltd. cross-border e-commerce integrated platform suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Shanghai Danfan Network Technology Co., Ltd. builds website system with SQL injection vulnerability (CNVD-2020-49081)

Huaxia chemical network was founded in 2000, is founded by Shanghai Danfan network technology limited company, for the chemical industry to provide supporting B2B e-commerce platform of professional website. Shanghai Danfan network science and technology limited company builds the station system...

CVE-2020-14533

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.1, 11.2 and prior to 11.3.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2020-14532

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.1, 11.2 and prior to 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Design/Logic Flaw

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.1, 11.2 and prior to 11.3.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

CVE-2020-14533

CVE-2020-14533 affects Oracle Commerce Platform (Dynamo Application Framework). Affected versions include 11.1, 11.2 and prior to 11.3.1. The flaw allows a high-privilege attacker with network access via HTTP to compromise the platform, with attack steps requiring human interaction. Potential out...

CVE-2020-14532

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce component: Dynamo Application Framework. Supported versions that are affected are 11.1, 11.2 and prior to 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14532

The CVE-2020-14532 affects Oracle Commerce Platform (Dynamo Application Framework) with vulnerable versions 11.1, 11.2 and prior to 11.3.1. The vulnerability enables an unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform, requiring human interaction from a...

CVE-2020-6264

SAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under certain conditions which would otherwise be restricted, leading to Information Disclosure...

SAP Commerce Trust Management Issue Vulnerability

SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. This product supports sales management, marketing management, order management and operations management. A trust management issue vulnerability exists in SAP Commerce that stems from the program's use of hard-coded...

SAP Commerce Input Validation Error Vulnerability

SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. The product supports sales management, marketing management, order management and operations management. An input validation error vulnerability exists in SAP Commerce that stems from the Rest API program not securely...

Unspecified Vulnerability in SAP Commerce

SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. The product supports sales management, marketing management, order management and operations management. SAP Commerce has a security vulnerability that can be exploited by attackers to compromise confidentiality...

SQL Injection Vulnerability in Laikepui E-commerce System of Hunan One Eight Network Technology Co. Ltd (CNVD-2020-25309)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. There is a SQL injection vulnerability in the Laike Push e-commerce system of Hunan One Eight Network Technology Co. Ltd, which can be exploited by an attacker to obtain...

SQL Injection Vulnerability in the E-commerce System of Hunan One Eight Network Technology Co.

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. There is a SQL injection vulnerability in the Laike Push e-commerce system of Hunan One Eight Network Technology Co. Ltd, which can be exploited by an attacker to obtain...

Emerging MakeFrame Skimmer from Magecart Sets Sights on SMBs

Researchers have observed a new skimmer from the prolific Magecart Group that has been actively harvesting payment-card data from 19 different victim websites, mainly belonging to small- and medium-sized businesses SMBs, for several months. RiskIQ researchers first discovered the skimmer, dubbed...

Shanghai Danfan Network Technology Co., Ltd. builds the station system exists the unauthorized access loophole

Shanghai Danfan Network Technology Co., Ltd. is for the chemical industry to provide B2B e-commerce platform of professional website. Shanghai Danfan network science and technology limited company builds the station system exists the unauthorized access vulnerability, the attacker may use the...

SAP Commerce Cross-Site Scripting Vulnerability (CNVD-2020-21059)

SAP Commerce is a cloud-based e-commerce platform from SAP, a German company. The product supports sales management, marketing management, order management and operations management , etc. SmartEdit Extension is one of the smart editor extension program . A cross-site scripting vulnerability exis...

Card Skimmer Hits Australian Bushfire Donation Site

Concerned global citizens making donations to help fight the massive Australia bushfires have been caught up in a Magecart attack, after one of the groups implanted a payment-card skimmer on the check-out page of a legitimate online donation site. Researchers ran across the Magecart script, named...

Rooster Teeth Attack Showcases New Magecart Approach

The online store for the Rooster Teeth video-streaming service has been hit with a malicious web redirect attack by Magecart, which allowed the cybercriminals to harvest users’ payment-card details. The attack marks a slight departure from the group’s typical tactics. Rooster Teeth, which offers...

Unspecified Vulnerability in Sylius

Sylius is a set of Symfony framework based on open source e-commerce platform . A security vulnerability exists in Sylius that can be exploited by an attacker to view internal system messages...