Lucene search
+L

10852 matches found

Vulnrichment
Vulnrichment
•added 2024/08/22 10:31 p.m.•34 views

CVE-2024-8086 SourceCodester E-Commerce System Admin Login login.php sql injection

A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ecommerce/admin/login.php of the component Admin Login. The manipulation of the argument useremail leads to sql injection. The attack can be...

7.5CVSS7AI score0.00689EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/08/22 10:31 p.m.•60 views

CVE-2024-8086 SourceCodester E-Commerce System Admin Login login.php sql injection

A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ecommerce/admin/login.php of the component Admin Login. The manipulation of the argument useremail leads to sql injection. The attack can be...

7.5CVSS0.00689EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/08/22 12:00 a.m.•20 views

SourceCodester E-Commerce System Code Issues and Vulnerabilities

SourceCodester E-Commerce System is an e-commerce system from SourceCodester Inc. A code issue vulnerability exists in SourceCodester E-Commerce System version 1.0 due to an untrusted file upload vulnerability in the photo parameter of the /ecommerce/admin/products/controller.php page...

9.8CVSS6.6AI score0.00697EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/22 12:00 a.m.•9 views

CVE-2024-8086: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ecommerce/admin/login.php of the component Admin Login. The manipulation of the argument useremail leads to sql injection. The attack can be...

9.8CVSS7AI score0.00689EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/08/22 12:00 a.m.•21 views

PT-2024-38796 · Sourcecodester · Sourcecodester E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Commerce System version 1.0 Description: A critical issue affects the processing of the file /ecommerce/popup Item.php, where the manipulation of the id argument leads to SQL injection. The attack can be initiated remotely. T...

9.8CVSS6.2AI score0.00599EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2024/08/22 12:00 a.m.•20 views

PT-2024-38797 · Unknown · Sourcecodester E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Commerce System version 1.0 Description: A critical issue has been found in the SourceCodester E-Commerce System, affecting an unknown function of the file /ecommerce/admin/products/controller.php. The manipulation of the pho...

9.8CVSS6.2AI score0.00697EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/22 12:00 a.m.•8 views

CVE-2024-8087: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester E-Commerce System 1.0 and classified as critical. This issue affects some unknown processing of the file /ecommerce/popupItem.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS6.4AI score0.00599EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/08/22 12:00 a.m.•18 views

SourceCodester E-Commerce System Security Vulnerabilities

SourceCodester E-Commerce System is an e-commerce system from SourceCodester Inc. A security vulnerability exists in the SourceCodester E-Commerce System version 1.0, which originates from an SQL injection vulnerability in the id parameter of the /ecommerce/popupItem.php page...

9.8CVSS6.5AI score0.00599EPSS
SaveExploits1References6
The Hacker News
The Hacker News
•added 2024/08/20 5:27 a.m.•36 views

Thousands of Oracle NetSuite Sites at Risk of Exposing Customer Information

Cybersecurity researchers are warning about the discovery of thousands of externally-facing Oracle NetSuite e-commerce sites that have been found susceptible to leaking sensitive customer information. "A potential issue in NetSuite's SuiteCommerce platform could allow attackers to access sensitiv...

6.7AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2024/08/19 7:25 p.m.•257 views

Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce

CVE-2024-34102 Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5...

9.8CVSS9.2AI score0.99994EPSS
SaveExploits26
GithubExploit
GithubExploit
•added 2024/08/19 7:25 p.m.•180 views

Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce

CVE-2024-34102 Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5...

9.8CVSS9.2AI score0.99994EPSS
SaveExploits26
CNVD
CNVD
•added 2024/08/16 12:00 a.m.•25 views

Adobe Commerce Security Bypass Vulnerability (CNVD-2024-40528)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which could be exploited by an attacker to bypass security measures to view and edit...

5.4CVSS5.5AI score0.00409EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/08/16 12:00 a.m.•40 views

Adobe Commerce Path Traversal Vulnerability

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A path traversal vulnerability exists in Adobe Commerce. The vulnerability stems from the program failing to properly filter for specific elements in a...

6.8CVSS6.8AI score0.00872EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/08/16 12:00 a.m.•34 views

Adobe Commerce Elevation of Privilege Vulnerability

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. An elevation of privilege vulnerability exists in Adobe Commerce, which could be exploited by an attacker to bypass security measures and modify seconda...

4.3CVSS5.5AI score0.00429EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/08/16 12:00 a.m.•45 views

Adobe Commerce Cross-Site Scripting Vulnerability (CNVD-2024-44532)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A cross-site scripting vulnerability exists in Adobe Commerce that can be exploited by an attacker to execute malicious JavaScript in a browser...

7.6CVSS7.2AI score0.00536EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/08/16 12:00 a.m.•37 views

Adobe Commerce Security Bypass Vulnerability (CNVD-2024-40533)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which can be exploited by an attacker to bypass security measures and modify secondary...

4.3CVSS5.5AI score0.00429EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/08/16 12:00 a.m.•50 views

Adobe Commerce OS Command Injection Vulnerability (CNVD-2024-44502)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security vulnerability exists in Adobe Commerce. An attacker could exploit this vulnerability to execute arbitrary code...

8.4CVSS8.4AI score0.01672EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/08/16 12:00 a.m.•50 views

Adobe Commerce Cross-Site Request Forgery Vulnerability (CNVD-2024-44533)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A cross-site request forgery vulnerability exists in Adobe Commerce, which could be exploited by an attacker to bypass security features and perform...

4.3CVSS5.4AI score0.00491EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/08/16 12:00 a.m.•39 views

Adobe Commerce Directory Traversal Vulnerability (CNVD-2024-44534)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce suffers from a directory traversal vulnerability that could be exploited by an attacker to access files and directories outside of a...

7.7CVSS7.3AI score0.00911EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/08/16 12:00 a.m.•26 views

Adobe Commerce OS Command Injection Vulnerability (CNVD-2024-36360)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce suffers from an operating system command injection vulnerability that stems from improper neutralization of special elements. An attacker...

8.4CVSS8.5AI score0.01672EPSS
SaveExploits0References1
Rows per page
Query Builder