e-commerce-unternehmen.de Improper Access Control vulnerability OBB-3764974

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-37532

HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files on the system...

CVE-2023-37532

HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files on the system...

Design/Logic Flaw

HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files on the system...

CVE-2023-37532 A path traversal vulnerability affects HCL Commerce

HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files on the system...

CVE-2023-37532 A path traversal vulnerability affects HCL Commerce

HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files on the system...

CVE-2023-37532

CVE-2023-37532 affects HCL Commerce Remote Store server. The connected sources describe a directory traversal vulnerability that lets an attacker read arbitrary files on the target system by sending a specially crafted URL. The core issue is a failure to properly sanitize file paths, enabling acc...

PCI DSS Compliance for E-commerce: Ensuring the Security of Cardholder Data

By Owais Sultan PCI DSS compliance in e-commerce safeguards cardholder data, fortifying trust in online transactions with robust security measures. Protecting… This is a post from HackRead.com Read the original post: PCI DSS Compliance for E-commerce: Ensuring the Security of Cardholder Data...

HCL Technologies HCL Commerce 路径遍历漏洞

HCL Technologies Commerce is a software platform framework for e-commerce from HCL Technologies, USA. The software includes marketing, sales, customer and order processing functionality in a customizable and integrated package. A directory traversal vulnerability exists in HCL Technologies...

The vulnerability of the Workbench search system component in Oracle Commerce Guided Search allows a perpetrator to gain unauthorized access to protected data or to modify, add, or delete protected data.

The vulnerability of the Workbench search engine component of Oracle Commerce Guided Search is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected data or to modify, add, or delete protected data...

Sitolog SQL Injection Vulnerability

Sitolog is an e-commerce management software from the French company Sitolog. A security vulnerability exists in Sitolog v7.8.a and earlier versions, which originates from a SQL injection vulnerability in the sitolog application connect module...

CVE-2023-22029

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce component: Workbench. The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search. Successf...

CVE-2023-22029

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce component: Workbench. The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search. Successf...

Design/Logic Flaw

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce component: Workbench. The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search. Successf...

CVE-2023-22029

Oracle Commerce Guided Search (Workbench) vulnerability tracked as CVE-2023-22029 affects version 11.3.2. The issue stems from insufficient input validation in the Workbench component, allowing an unauthenticated attacker with network access over HTTP to compromise the product. Attacks require us...

Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module

Multiple stored cross-site scripting XSS vulnerabilities in the Commerce module before 4.0.35 from Liferay Portal 7.3.5 through 7.4.3.91, and Liferay DXP 7.3 update 33 and earlier, and 7.4 before update 92 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injecte...

GHSA-QP68-5V39-R869 Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module

Multiple stored cross-site scripting XSS vulnerabilities in the Commerce module before 4.0.35 from Liferay Portal 7.3.5 through 7.4.3.91, and Liferay DXP 7.3 update 33 and earlier, and 7.4 before update 92 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injecte...

Adobe Commerce Resource Management Error Vulnerability (CNVD-2024-25603)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A resource management error vulnerability exists in Adobe Commerce prior to version 2.4.7, which stems from being affected by an uncontrolled resource...

PT-2023-28455 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.3.5 through 7.4.3.91 Liferay DXP versions 7.3 update 33 and earlier, and 7.4 before update 92 Description: Multiple stored cross-site scripting XSS vulnerabilities in the Commerce module allow remote attackers to...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in insufficient validation of input data, which allows attackers to exploit their privileges.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges by using a direct reference to the...