8709 matches found
WooCommerce Pricing Plugin Allows Malicious Code-Injection
A pair of security vulnerabilities in the WooCommerce Dynamic Pricing and Discounts plugin from Envato could allow unauthenticated attackers to inject malicious code into websites running unpatched versions. This can result in a variety of attacks, including website redirections to phishing pages...
OpenMage Magento Lts Input Validation Error Vulnerability
OpenMage Magento Lts Magento, an e-commerce system from the OpenMage organization, is vulnerable to an input validation error in versions prior to OpenMage Magento LTS 19.4.15 and 20.0.13, which can be exploited by attackers to execute arbitrary commands via the block method...
OpenMage Magento LTS Input Validation Error Vulnerability (CNVD-2021-101205)
OpenMage Magento Lts Magento, an e-commerce system from the OpenMage organization, is vulnerable to an input validation error in versions prior to OpenMage Magento LTS 19.4.15 and 20.0.13, which can be exploited by attackers to upload arbitrary executable files to the server...
The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of measures taken to protect the website structure. This allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from improper code generation, allowing attackers to execute arbitrary code.
The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to lack of access control, allows a hacker to gain unauthorized access to the administration panel.
The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the administration panel...
The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of measures taken at the management level to clean up data. This allows attackers to execute arbitrary code.
The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the lack of measures taken to clean up data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from improper code generation, allowing attackers to execute arbitrary code.
The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from improper code generation, allowing attackers to execute arbitrary code.
The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of measures taken at the management level to clean up data. This allows attackers to execute arbitrary code.
The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the lack of measures taken to clean up data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of measures taken to protect the website structure. This allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
Pimcore Formula Injection Vulnerability
Pimcore is a set of open source Web content management platform for creating and managing Web applications from Austrian company Pimcore. The platform integrates Web content management, e-commerce framework and product information management applications.Pimcore versions prior to 10.1.1 have a...
Shopware Input Validation Error Vulnerability
Shopware is a suite of open source e-commerce software from the German company Shopware. shopware has a security vulnerability and no details of the vulnerability are currently available...
Shopware code issue vulnerability (CNVD-2021-63766)
Shopware is a suite of open source e-commerce software from the German company Shopware. versions of Shopware prior to 6.4.3.1 are vulnerable to a code issue that allows an authenticated attacker to upload files via URL to trigger server-side request forgery. No detailed vulnerability details are...
Shopware Command Injection Vulnerability
Shopware is a suite of open source e-commerce software from the German company Shopware. versions of Shopware prior to 6.4.3.1 have a command injection vulnerability in the mail proxy settings. No detailed vulnerability details are currently available...
Brace yourselves: Holiday shopping season is coming
The E-commerce market has seen tremendous revenue growth during the pandemic. Along with that good news for E-business, there has been an increase in fraudulent activities online that may cost retailers over $20 billion in losses by the end of 2021. According to eMarketer, worldwide retail...
Shopware has an unspecified vulnerability
Shopware is an open source e-commerce software.The import/export functionality in versions of Shopware prior to 6.4.3.1 is vulnerable to insecure direct object referencing of log files. No detailed vulnerability details are currently available...
Shopware Cross-Site Scripting Vulnerability (CNVD-2021-94930)
Shopware is an open source e-commerce software. cross-site scripting vulnerability exists in versions of Shopware prior to 6.4.3.1. An attacker can exploit the vulnerability to conduct cross-site scripting attacks via SVG media files...
