Buffer overflow

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Framework. Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

Buffer overflow

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Website. Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2017-10172

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Framework. Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2017-10172

The CVE affects Oracle Retail Open Commerce Platform (Framework subcomponent) across versions 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. An unauthenticated attacker with network access via HTTP can compromise the platform and may update, insert, delete, or read data due to a defined vulnerabili...

CVE-2017-10173

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Website. Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2017-10172

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Framework. Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2017-10173

CVE-2017-10173 affects the Oracle Retail Open Commerce Platform (Website subcomponent). Affected are Oracle Retail Applications versions 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. The vulnerability allows an unauthenticated attacker with network access over HTTP to potentially compromise the pl...

Oracle Retail Open Commerce Platform Remote Vulnerability

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation, of which Oracle Retail Open Commerce Platform is an e-commerce solution component. A security vulnerability exists in the Framework subcomponent of the Retail Open Commerce Platform component of...

Oracle Retail Open Commerce Platform Remote Vulnerability (CNVD-2017-27233)

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation, of which Oracle Retail Open Commerce Platform is an e-commerce solution component. A security vulnerability exists in the Website subcomponent of the Retail Open Commerce Platform component of Orac...

iWebShop open source mall system toSeller parameter SQL injection vulnerability

iWebShop is an open source WEB e-commerce B2B2C platform self-supporting + merchants stationed station-building system based on PHP language + MYSQL database development, using the MVC architecture Yii framework thinking design pattern carefully designed a product. iWebShop open source mall syste...

Superior and safe user experiences with the Akamai Cloud Delivery Platform

Your customers are unique and they all expect fast, secure, personalized digital experiences. They are spread across the world, in regions of varying network connectivity, utilize a plethora of devices and screen sizes - making it challenging to deliver your experiences. By delivering 95 Exabytes...

Redirection Vulnerability Open in Multiple IBM Products

IBM WebSphere Commerce Enterprise and others are products of IBM Corporation in the U.S. IBM WebSphere Commerce Enterprise is a suite of e-commerce solutions for high-volume B2C and B2B business models and multiple e-commerce sites; Express is a suite of business intelligence and planning...

Open redirect

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to...

CVE-2017-1398

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to...

CVE-2017-1398

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to...

CVE-2017-1398

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to...

CVE-2017-1398

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0/7.0/8.0 are affected by CVE-2017-1398, an open redirect vulnerability that could let a remote attacker lure a victim to a crafted site, spoof the displayed URL, and redirect to a malicious site to obtain sensitive informa...

availablenow.com XSS vulnerability

Vulnerable URL: http://www.availablenow.com/complex.asp?complex=Commerce%20Park=1"...

PayPal Inc BB #149 - (Gift) Insufficient Authentication

Document Title: =============== PayPal Inc BB 149 - Gift Insufficient Authentication References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1973 ID EIBBP-34368 Release Date: ============= 2017-06-20 Vulnerability Laboratory ID VL-ID:...

SQL Injection Vulnerability in FeiWa B2B2C Mall System

FeiWa B2B2C mall system is an enterprise-level B2B2C e-commerce platform system. A SQL injection vulnerability exists in FeiWa B2B2C Mall System. An attacker can exploit this vulnerability to obtain sensitive information from the database...