Drupal Commerce View Receipt module < 1.0.3 - Authenticated Broken Access Control vulnerability

Authenticated Broken Access Control vulnerability discovered by Norman Kämper-Leymann in WordPress Module Commerce View Receipt versions 1.0.3...

Commerce View Receipt - Moderately critical - Access bypass - SA-CONTRIB-2024-021

The Commerce View Receipts module enables you to view commerce order receipts in the browser. The module doesn't sufficiently check access permissions, allowing an unauthorised user to view the private information of other customers...

Magento XSS

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to the lack of measures taken to protect the structure of web pages when processing form fields. Exploiting this vulnerability allows a malicious actor to perfor...

Magento Open Source Code Execution

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

CVE-2024-5049

A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack may be launched remotely...

CVE-2024-5049 Codezips E-Commerce Site editproduct.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack may be launched remotely...

CVE-2024-5049 Codezips E-Commerce Site editproduct.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack may be launched remotely...

CVE-2024-5049

CVE-2024-5049 affects Codezips E-Commerce Site 1.0. The vulnerability is in admin/editproduct.php where manipulating the profilepic parameter leads to unrestricted file upload, enabling remote abuse. The issue is tied to unknown functionality in the editproduct.php handling of profilepic, enablin...

CVE-2024-5049: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack may be launched remotely...

E-Commerce Site Code Vulnerabilities

E-Commerce Site is an e-commerce website. A code issue vulnerability exists in E-Commerce Site version 1.0, which stems from the parameter profilepic in the file admin/editproduct.php that can cause unrestricted uploads...

PT-2024-34267 · Unknown · Codezips E-Commerce Site

Name of the Vulnerable Software and Affected Versions: Codezips E-Commerce Site version 1.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file admin/editproduct.php. The manipulation of the profilepic argument leads to unrestricted uploa...

Cross-site Scripting (XSS)

Magento Commerce is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient input validation and sanitization, allowing attackers to inject malicious scripts into web pages viewed by other users...

CVE-2024-4923

A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/addproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

CVE-2024-4923 Codezips E-Commerce Site addproduct.php unrestricted upload

A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/addproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

CVE-2024-4923 Codezips E-Commerce Site addproduct.php unrestricted upload

A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/addproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

CVE-2024-4923

Codezips E-Commerce Site 1.0 contains a vulnerability in admin/addproduct.php where manipulation of the profilepic parameter enables unrestricted file upload. This can be exploited remotely, and public exploit information exists. Impact per available data includes high confidentiality, integrity,...

PT-2024-33366

Name of the Vulnerable Software and Affected Versions Codezips E-Commerce Site version 1.0 Description A critical issue has been found in the Codezips E-Commerce Site, affecting the file admin/addproduct.php. The manipulation of the profilepic argument leads to unrestricted upload. The attack can...

CVE-2024-4923: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/addproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

E-Commerce Site Code Issue Vulnerability

E-Commerce Site is an e-commerce website. A code issue vulnerability exists in E-Commerce Site version 1.0, which stems from admin/addproduct.php containing unknown code that causes unrestricted uploads via the parameter profilepic...

GHSA-CV25-3PXR-4Q7X Magento Open Source Security Advisory: Patch SUPEE-10975

Magento Commerce 1.14.4.0 and Open Source 1.9.4.0 have been enhanced with critical security updates to address multiple vulnerabilities, including remote code execution RCE, cross-site scripting XSS, cross-site request forgery CSRF, and more. The following issues have been identified and...