8776 matches found
Exploit for Improper Input Validation in Adobe Commerce
CVE-2022-24086 PoC of CV...
Top 5 Mobile Commerce Trends in 2022
By Owais Sultan Due to its many benefits, mobile commerce has been growing quickly over the last several years. The need… This is a post from HackRead.com Read the original post: Top 5 Mobile Commerce Trends in 2022...
Malicious Package
Overview commerce-clients is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...
Security Bulletin: Multiple security vulnerabilities in IBM Sales Center for WebSphere Commerce (CVE-2008-7271, CVE-2010-4647, CVE-2012-0186, CVE-2012-0191, CVE-2012-2159, CVE-2012-2161)
Abstract Multiple security vulnerabilities have been identified in IBM Sales Center for WebSphere Commerce V6.0 and V7.0 Content VULNERABILITY DETAILS – Directory Traversal CVE ID: CVE-2012-0186 DESCRIPTION: Specially crafted URLs can be sent to the Eclipse Help component of IBM Sales Center for...
LivelyCart Pro 3 Cross Site Scripting
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
Security Risks in Logistics APIs Used by E-Commerce Platforms
Our research examines the security flaws that we found in the logistics API implementation of e-commerce platforms that can potentially expose the consumers’ personal information. We discuss the security risks that such flaws present for software engineers, e-commerce platform providers, and...
CVE-2022-36101
Shopware is an open source e-commerce software. In affected versions the request for the customer detail view in the backend administration contained sensitive data like the hashed password and the session ID. These fields are now explicitly unset in version 5.7.15. Users are advised to update an...
CVE-2022-36102
Shopware is an open source e-commerce software. In affected versions if backend admin controllers are called with a certain notation, the ACL could be bypassed. Users could execute actions, which they are normally not able to do. Users are advised to update to the current version 5.7.15. Users ca...
Design/Logic Flaw
Shopware is an open source e-commerce software. In affected versions if backend admin controllers are called with a certain notation, the ACL could be bypassed. Users could execute actions, which they are normally not able to do. Users are advised to update to the current version 5.7.15. Users ca...
Design/Logic Flaw
Shopware is an open source e-commerce software. In affected versions the request for the customer detail view in the backend administration contained sensitive data like the hashed password and the session ID. These fields are now explicitly unset in version 5.7.15. Users are advised to update an...
CVE-2022-36102
Shopware 5.x contains an ACL bypass in backend admin controllers that can be triggered by a specific notation, allowing users to perform actions normally restricted. Affected versions include 5.7.x prior to 5.7.15; remediation is to update to 5.7.15 (via Auto-Updater or download). No public explo...
CVE-2022-36101
The CVE-2022-36101 issue affects Shopware (Shopware 5.x). In affected versions, the backend customer detail view could expose sensitive data, specifically hashed passwords and session IDs, to unauthorized viewers. The root cause is that the request for the customer detail view did not unset these...
PrestaShop Cross-Site Scripting Vulnerability (CNVD-2022-62230)
PrestaShop is an open source e-commerce solution from PrestaShop Inc. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. PrestaShop module 5.0.2 prior versions of cross-site scripting vulnerability, the vulnerability stems from t...
Commerce Elavon - Moderately critical - Access bypass - SA-CONTRIB-2022-053
This module enables you to accept payments from the Elavon payment provider. The module doesn't sufficiently verify that it's communicating with the correct server when using the Elavon On-site payment gateway, which could lead to leaking valid payment details as well as accepting invalid payment...
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in their lack of access control mechanisms. This allows attackers to trigger service interruptions.
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of authentication procedures, which allow attackers to increase their privileges.
The vulnerability of the software platforms for developing and managing online stores Magento Open Source and Adobe Commerce is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in insufficient validation of input data, which allows attackers to exploit this weakness to increase their privileges.
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce stores is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending specially crafted requests...
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...
osCommerce Cross-Site Scripting Vulnerability (CNVD-2022-59212)
osCommerce is an open source online shopping e-commerce solution based on the GNUGPL license. osCommerce2 v2.3.4.1 previously had a security vulnerability that stemmed from a security issue with the function tepdberror. No detailed vulnerability details are available...