Magento 2.4.6 XSLT Server Side Injection / Command Execution Vulnerability

Magento version 2.4.6 suffers from an XSLT server side injection vulnerability that allows for remote command execution. Exploit Title: Magento ver. 2.4.6 - XSLT Server Side Injection Exploit Author: tmrswrr Vendor Homepage: https://magento2demo.firebearstudio.com/ Software Link:...

DRUPAL-CONTRIB-2023-052

This module enables you to pay online via Mollie. The module might not properly load the correct order to update the payment status when Mollie redirects to the redirect URL. This can allow an attacker to apply other people's orders to their own, getting credit without paying. This vulnerability ...

WordPress Welcart e-Commerce Plugin < 2.9.6 is vulnerable to PHP Object Injection

Software Welcart e-Commerce Type Plugin Vulnerable versions 2.9.6 Fixed in 2.9.6 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE N/A Patch priority Medium CVSS severity Medium 4.4 Developer Claim ownership PSID dd10708cfd4f Credits WordFence Required privilege Published 15...

WordPress Welcart e-Commerce Plugin <= 2.9.4 is vulnerable to Arbitrary File Upload

Software Welcart e-Commerce Type Plugin Vulnerable versions = 2.9.4 Fixed in 2.9.5 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE N/A Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 876ec2065bf2 Credits WordFence Required privilege Subscriber Publish...

Chinese Hackers Launch Covert Espionage Attacks on 24 Cambodian Organizations

Cybersecurity researchers have discovered what they say is malicious cyber activity orchestrated by two prominent Chinese nation-state hacking groups targeting 24 Cambodian government organizations. "This activity is believed to be part of a long-term espionage campaign," Palo Alto Networks Unit ...

Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injection

Description The plugin unserializes user input from cookies, which could allow unautehtniacted users to perform PHP Object Injection when a suitable gadget is present on the blog To simulate a gadget chain, put the following code in a plugin: class Evil public function wakeup : void die"Arbitrary...

Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injection

Description The plugin unserializes user input from cookies, which could allow unautehtniacted users to perform PHP Object Injection when a suitable gadget is present on the blog PoC To simulate a gadget chain, put the following code in a plugin: class Evil public function wakeup : void...

Welcart e-Commerce < 2.9.5 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC Make a logged in admin open the URL below:...

Welcart e-Commerce < 2.9.5 - Reflected XSS

Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Make a logged in admin open the URL below:...

Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File Upload

Description The plugin does not validate files to be uploaded, as well as does not have authorisation and CSRF in an AJAX action handling such upload. As a result, any authenticated users, such as subscriber could upload arbitrary files, such as PHP on the server PoC Setup As admin: - Go the the...

CVE-2023-46642

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce plugin = 1.2.2 versions...

CVE-2023-46642

A vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce sahu-tiktok-pixel.This issue affects SAHU TikTok Pixel for E-Commerce: from n/a through = 1.2.2...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce plugin = 1.2.2 versions...

CVE-2023-46642

CVE-2023-46642 affects the SAHU TikTok Pixel for E-Commerce WordPress plugin up to version 1.2.2. The issue is a stored Cross-Site Scripting (XSS) vulnerability that requires an authenticated admin-level (admin+) user to trigger. Root cause is insufficient input sanitization/output escaping in th...

CVE-2023-46642 WordPress SAHU TikTok Pixel for E-Commerce Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce plugin = 1.2.2 versions...

WordPress Plugin SAHU TikTok Pixel for E-Commerce Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin SAHU TikTo...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of authentication mechanisms. This allows attackers to access information about arbitrary user accounts.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to access and disclose information about arbitrary user...

A.S. Watson Group : Access to internal info via Graphql on https://tng-api.watsons.com.my

Vulnerability description not provided...

HCL Technologies Commerce Directory Traversal Vulnerability

HCL Technologies Commerce is a software platform framework for e-commerce from HCL Technologies, USA. The software includes marketing, sales, customer and order processing functionality in a customizable and integrated package. A directory traversal vulnerability exists in HCL Technologies...

WordPress SAHU TikTok Pixel for E-Commerce Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)

Software SAHU TikTok Pixel for E-Commerce Type Plugin Vulnerable versions = 1.2.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46642 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 7f22eacc059a Credits Rio...