CVE-2024-5049

CVE-2024-5049 affects Codezips E-Commerce Site 1.0. The vulnerability is in admin/editproduct.php where manipulating the profilepic parameter leads to unrestricted file upload, enabling remote abuse. The issue is tied to unknown functionality in the editproduct.php handling of profilepic, enablin...

CVE-2024-5049 Codezips E-Commerce Site editproduct.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack may be launched remotely...

PT-2024-34267 · Unknown · Codezips E-Commerce Site

Name of the Vulnerable Software and Affected Versions: Codezips E-Commerce Site version 1.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file admin/editproduct.php. The manipulation of the profilepic argument leads to unrestricted uploa...

E-Commerce Site 代码问题漏洞

E-Commerce Site is an e-commerce website. A code issue vulnerability exists in E-Commerce Site version 1.0, which stems from the parameter profilepic in the file admin/editproduct.php that can cause unrestricted uploads...

Cross-site Scripting (XSS)

Magento Commerce is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient input validation and sanitization, allowing attackers to inject malicious scripts into web pages viewed by other users...

CVE-2024-4923

A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/addproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

CVE-2024-4923 Codezips E-Commerce Site addproduct.php unrestricted upload

A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/addproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

CVE-2024-4923 Codezips E-Commerce Site addproduct.php unrestricted upload

A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/addproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

CVE-2024-4923

Codezips E-Commerce Site 1.0 contains a vulnerability in admin/addproduct.php where manipulation of the profilepic parameter enables unrestricted file upload. This can be exploited remotely, and public exploit information exists. Impact per available data includes high confidentiality, integrity,...

E-Commerce Site Code Issue Vulnerability

E-Commerce Site is an e-commerce website. A code issue vulnerability exists in E-Commerce Site version 1.0, which stems from admin/addproduct.php containing unknown code that causes unrestricted uploads via the parameter profilepic...

GHSA-CV25-3PXR-4Q7X Magento Open Source Security Advisory: Patch SUPEE-10975

Magento Commerce 1.14.4.0 and Open Source 1.9.4.0 have been enhanced with critical security updates to address multiple vulnerabilities, including remote code execution RCE, cross-site scripting XSS, cross-site request forgery CSRF, and more. The following issues have been identified and...

GHSA-6WM4-3RJJ-C8XX Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities

SUPEE-10975, Magento Commerce 1.14.4.0 and Open Source 1.9.4.0 contain multiple security enhancements that help close remote code execution RCE, cross-site scripting XSS, cross-site request forgery CSRF and other vulnerabilities...

PT-2024-40098 · Adobe · Magento Open Source +1

Name of the Vulnerable Software and Affected Versions: Magento Commerce and Open Source versions prior to 2.2.5 Magento Commerce and Open Source versions prior to 2.1.14 Description: The issue concerns remote code execution RCE, Cross-Site Scripting XSS, and other security problems...

PT-2024-40137 · Adobe · Magento Open Source +1

Name of the Vulnerable Software and Affected Versions: Magento Commerce versions prior to 1.14.4.0 Magento Open Source versions prior to 1.9.4.0 Description: The issue concerns remote code execution RCE, cross-site scripting XSS, and cross-site request forgery CSRF among other vulnerabilities...

PT-2024-40249 · Jquery Foundation +1 · Jquery +2

Name of the Vulnerable Software and Affected Versions: Magento Commerce versions 1.9.0.0 through 1.14.4.0 Magento Open Source versions 1.5.0.0 through 1.9.4.0 Description: The issue concerns multiple vulnerabilities in Magento, including remote code execution RCE, cross-site scripting XSS, and...

PT-2024-40414 · Adobe · Magento Open Source +1

Name of the Vulnerable Software and Affected Versions: Magento Commerce versions 1.9.0.0 through 1.14.3.9 Magento Open Source versions 1.5.0.0 through 1.9.3.9 Description: The issue concerns various security vulnerabilities, including authenticated Admin user remote code execution RCE, cross-site...

CVE-2022-28132

The T-Soft E-Commerce 4 web application is susceptible to SQL injection SQLi attacks when authenticated as an admin or privileged user. This vulnerability allows attackers to access and manipulate the database through crafted requests. By exploiting this flaw, attackers can bypass authentication...

CVE-2022-28132

CVE-2022-28132 concerns the T-Soft E-Commerce 4 web application, where an authenticated admin/privileged user can trigger a SQL injection via crafted requests. The vulnerability allows attackers to access and manipulate the database, bypass authentication, view sensitive data, and potentially exf...

CVE-2022-28132

The T-Soft E-Commerce 4 web application is susceptible to SQL injection SQLi attacks when authenticated as an admin or privileged user. This vulnerability allows attackers to access and manipulate the database through crafted requests. By exploiting this flaw, attackers can bypass authentication...

CVE-2022-28132

The T-Soft E-Commerce 4 web application is susceptible to SQL injection SQLi attacks when authenticated as an admin or privileged user. This vulnerability allows attackers to access and manipulate the database through crafted requests. By exploiting this flaw, attackers can bypass authentication...