8524 matches found
Kentico CMS 11 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Kentico CMS version 9 through 11 - Cross-Site Scripting Reflect Software Link: https://www.kentico.com Exploit Author: Keerati T. CVE: CVE-2018-7205 Category: webapps 1. Description Kentico is the only fully integrated ASP.NET...
Kentico CMS 11 Cross Site Scripting
Exploit Title: Kentico CMS version 9 through 11 - Cross-Site Scripting Reflect Date: 18-02-2018 Software Link: https://www.kentico.com Exploit Author: Keerati T. CVE: CVE-2018-7205 Category: webapps 1. Description Kentico is the only fully integrated ASP.NET CMS, E-commerce, and Online Marketing...
Joomla! JGive 2.0.9 SQL Injection
Exploit Title: Joomla! Component JGive 2.0.9 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://techjoomla.com/ Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/donations/jgive/ Version: 2.0.9 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...
Joomla! Component jGive 2.0.9 - SQL Injection
Exploit Title: Joomla! Component JGive 2.0.9 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: http://techjoomla.com/ Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/donations/jgive/ Version: 2.0.9 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...
Coinbase: Prepopulation of email address and name leaks information provided to other merchants
Users of the commerce widget that have entered their name and email into the widget and moved to the currency selection step were vulnerable to a clickjacking attack that revealed name and email to an attacker due to pre-population of the widget's fields. After a user filled out the name / email...
Magento Commerce T2 - (attr) Persistent Web Vulnerability
Document Title: =============== Magento Commerce T2 - attr Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1459 Release Date: ============= 2018-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 14...
Magento Commerce T2 - (attr) Persistent Web Vulnerability
Document Title: =============== Magento Commerce T2 - attr Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1459 Release Date: ============= 2018-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 14...
Website Glitch Let Me Overstock My Coinbase
Coinbase and Overstock.com just fixed a serious glitch that allowed Overstock customers to buy any item at a tiny fraction of the listed price. Potentially more punishing, the flaw let anyone paying with bitcoin reap many times the authorized bitcoin refund amount on any canceled Overstock orders...
commerceltd.gr XSS vulnerability
Open Bug Bounty ID: OBB-489577 Description| Value ---|--- Affected Website:| commerceltd.gr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure base...
Magento Commerce - SSRF & XSPA Web Vulnerability
Document Title: =============== Magento Commerce - SSRF & XSPA Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1631 Release Date: ============= 2018-01-03 Vulnerability Laboratory ID VL-ID: ==================================== 1631 Comm...
Joomla! JEXTN Membership 3.1.0 SQL Injection
Title: Joomla! JEXTN Membership 3.1.0 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.jextn.com URL: https://extensions.joomla.org/extensions/extension/e-commerce/membership-a-subscriptions/jextn-membership/ Product: 'Joomla! JEXTN Membership 3.1.0' Developer: jextn.com Last updated: Ja...
Joomla Jtag Minicart 4.1.0 SQL Injection
Title: Joomla Jtag Minicart 4.1.0 - SQL injection Credit: Bilal KARDADOU Vendor: https://joomlatag.com URL: https://extensions.joomla.org/extensions/extension/e-commerce/shopping-cart/jtag-minicart/ Product: 'Joomla Jtag Minicart 4.1.0' Developer: JoomlaTag Last updated: Jun 06 2016 Compatibility...
Joomla Jtag Minicart 4.1.0 SQL Injection Vulnerability
Exploit for php platform in category web applications Title: Joomla Jtag Minicart 4.1.0 - SQL injection Credit: Bilal KARDADOU Vendor: https://joomlatag.com URL: https://extensions.joomla.org/extensions/extension/e-commerce/shopping-cart/jtag-minicart/ Product: 'Joomla Jtag Minicart 4.1.0'...
Skyrocketing Bitcoin Fees Hit Carders in Wallet
Critics of unregulated virtual currencies like Bitcoin have long argued that the core utility of these payment systems lies in facilitating illicit commerce, such as buying drugs or stolen credit cards and identities. But recent spikes in the price of Bitcoin -- and the fees associated with movin...
WordPress WP e-Commerce – Clockwork SMS plugin <=2.0.5 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability found by Elias Dimopoulos in WordPress WP e-Commerce – Clockwork SMS plugin versions =2.0.5. Solution Update the WordPress WP e-Commerce – Clockwork SMS plugin to the latest available version at least 2.4.2...
PHP Scripts Mall E-commerce MLM Software SQL Injection Vulnerability
PHP Scripts Mall E-commerce MLM Software is a PHP based e-commerce online marketing system from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall E-commerce MLM Software version 1.0. A remote attacker can inject SQL into the PHP Scripts Mall E-commerce MLM Software...
CVE-2017-17629
Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...
CVE-2017-17610
E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...
