8587 matches found
CVE-2021-27602
CVE-2021-27602 affects SAP Commerce Backoffice in versions 1808, 1811, 1905, 2005, 2011. The backoffice allows certain authorized users to create source rules, which are translated to Drools rules when published to certain modules. The vulnerability arises when an attacker with this authorization...
SAP Commerce 代码注入漏洞
SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. This product supports sales management, marketing management, order management and operations management. A security vulnerability exists in SAP Commerce 1808, 1811, 1905, 2005, 2011, which allows certain authorized user...
Command Execution Vulnerability in UFIDA NC
UFIDA NC is a large erp enterprise management system and e-commerce platform. UFIDA NC suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...
XMall has an information leakage vulnerability
XMall is based on SpringBoot MyBatis e-commerce system , including the front mall system and backend management system . XMall has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
CVE-2021-21398
PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.7.3, an attacker can inject HTML when the Grid Column Type DataColumn is badly used. The problem is fixed in 1.7.7.3...
CVE-2021-21398
PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.7.3, an attacker can inject HTML when the Grid Column Type DataColumn is badly used. The problem is fixed in 1.7.7.3...
Design/Logic Flaw
PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.7.3, an attacker can inject HTML when the Grid Column Type DataColumn is badly used. The problem is fixed in 1.7.7.3...
CVE-2021-21398 Possible XSS injection through DataColumn Grid class
PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.7.3, an attacker can inject HTML when the Grid Column Type DataColumn is badly used. The problem is fixed in 1.7.7.3...
CVE-2021-21398
CVE-2021-21398 affects PrestaShop prior to 1.7.7.3. The vulnerability arises when the Grid Column Type DataColumn is badly used, allowing an attacker to inject HTML. The issue is fixed in version 1.7.7.3. The connected documents do not provide exploitation details or in-the-wild status.
MobiKwik Suffers Major Breach — KYC Data of 3.5 Million Users Exposed
Popular Indian mobile payments service MobiKwik on Monday came under fire after 8.2 terabytes TB of data belonging to millions of its users began circulating on the dark web in the aftermath of a major data breach that came to light earlier this month. The leaked data includes sensitive personal...
The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.
The vulnerability of the Magento Commerce development and management software platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...
The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of automatic termination of all sessions after changing passwords. This allows attackers to gain unauthorized access to limited resources.
The vulnerability of the Magento Commerce software development and management platform lies in the lack of automatic termination of all sessions after the password is changed. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to limited resources...
The vulnerability of the integration component of the Magento Commerce software development and management platform, related to authentication errors, allows attackers to gain unauthorized access to protected information.
The vulnerability of the integration component of the Magento Commerce software development and management platform is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by using...
The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.
The vulnerability of the Magento Commerce development and management software platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...
The vulnerability of the integration component of the Magento Commerce software development and management platform relates to the lack of protection against cross-site request forgery attacks. This allows attackers to perform unauthorized changes to user metadata.
The vulnerability of the integration component of the Magento Commerce software platform for online store development and management is related to the lack of protection against cross-site request forgery attacks. Exploiting this vulnerability allows a malicious actor to perform unauthorized...
The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of automatic termination of all sessions after changing passwords. This allows attackers to gain unauthorized access to limited resources.
The vulnerability of the Magento Commerce software development and management platform lies in the lack of automatic termination of all sessions after the password is changed. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to limited resources...
The vulnerability of the Magento Commerce software platform for developing and managing online stores relates to errors in processing XML requests, which allows a hacker to execute arbitrary code.
Vulnerability of the software platform for developing and managing online stores Magento Commerce. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with access rights as an administrator to the console...
TYPO3 Aimeos shop and e-commerce framework cross-site scripting vulnerability
TYPO3 is a free and open source content management system. TYPO3 Aimeos shop and e-commerce framework suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code...
Apache OFBiz RCE Vulnerability
Apache OFBiz is an e-commerce platform for building medium-sized and large enterprise-class, cross-platform, cross-database, cross-application server multi-tier, distributed e-commerce applications. An RCE vulnerability exists in Apache OFBiz. An unauthenticated attacker can exploit this...