8524 matches found
Credit Card Breach at Buckle Stores
The Buckle Inc., a clothier that operates more than 450 stores in 44 U.S. states, disclosed Friday that its retail locations were hit by malicious software designed to steal customer credit card data. The disclosure came hours after KrebsOnSecurity contacted the company regarding reports from...
Automattic: Timing attack woocommerce, simplify commerce gateway
file class-wc-gateway-simplify-commerce.php method returnhandler e.g. where woocommerce marks the order regarding its payment / transaction. public function returnhandler @obclean; header 'HTTP/1.1 200 OK' ; if isset $REQUEST'reference' && isset $REQUEST'paymentId' && isset $REQUEST'signature'...
Arbitrary User Password Reset Vulnerability in BBCBuilder E-Commerce System
BBCBuilder e-commerce system is a b2b2c model developed by Yuanfeng Company, which supports the e-commerce system of platform self-supporting and supplier store coexistence mode. BBCBuilder e-commerce system version 2.6.1, there is an arbitrary user password reset vulnerability, attackers use the...
Joomla Payage 2.05 Component - aid Parameter SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla Payage 2.05 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Vendor Home : https://extensions.joomla.org/extensions/extension/e-commerce/payment-systems/payage/ My Home :...
Joomla! Component Payage 2.05 - aid SQL Injection
Joomla! Component Payage 2.05 - aid SQL Injection Exploit Title: Joomla Payage 2.05 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Vendor Home : https://extensions.joomla.org/extensions/extension/e-commerce/payment-systems/payage/ My Home :...
Joomla! Component Payage 2.05 - 'aid' SQL Injection
Exploit Title: Joomla Payage 2.05 - SQL Injection Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Mojtaba Kazemi Vendor Home : https://extensions.joomla.org/extensions/extension/e-commerce/payment-systems/payage/ My Home : http://persian-team.ir/ Google Dork :...
Cross-Site Request Forgery Vulnerability in the User Center of BBCBuilder E-Commerce System
BBCBuilder e-commerce system is a b2b2c model developed by Yuanfeng Company, which supports the e-commerce system of platform self-supporting and supplier store coexistence mode. A cross-site request forgery vulnerability exists in the user center of the BBCBuilder e-commerce system, which allows...
hotscripts.com XSS vulnerability
Vulnerable URL: http://www.hotscripts.com/category/scripts/asp/scripts-components/e-commerce/shopping-carts//...
CVE-2015-5468
Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter to includes/download.php...
CVE-2015-5468
The CVE-2015-5468 entry concerns WordPress WP e-Commerce Shop Styling plugin, affected version: before 2.6. The vulnerability is a Directory Traversal in includes/download.php, allowing a remote attacker to read arbitrary files by supplying a .. in the filename parameter. Impact is file disclosur...
CVE-2015-5468
Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter to includes/download.php...
Do you think web passwords are the weakest link in security? Indeed they are.
Between 500K and 500M sets of credentials have been compromised over the recent years, according to various sources. Just last week, a compromise of an educational service Edmondo has been reported to expose as many as 78M user accounts. At the same time, individual users are exposed to so many...
Oracle Commerce Guided Search/Oracle Commerce Experience Manager Component Denial of Service Vulnerability
Oracle Commerce is a suite of e-business solution platforms from Oracle Corporation, USA. Oracle Commerce Guided Search/Oracle Commerce Experience Manager component is one of the components that supports the ability to dynamically Oracle Commerce Guided Search/Oracle Commerce Experience Manager...
IBM WebSphere Commerce Local Elevation of Privilege Vulnerability
IBM WebSphere Commerce is a suite of e-business solutions from IBM in the United States. The solution supports all sales business models, including B2C, B2B and B2B2C, on a single customer interaction platform. An elevation of privilege vulnerability exists in IBM WebSphere Commerce. A local,...
Oracle Retail Open Commerce Platform Unauthorized Modification Vulnerability
Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation, of which Oracle Retail Open Commerce Platform is an e-commerce solution component. A security vulnerability exists in the Web subcomponent of the Oracle Retail Open Commerce Platform component of...
CVE-2017-1170
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user's session. IBM X-Force ID: 123230...
CVE-2017-1170
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user's session. IBM X-Force ID: 123230...
Code injection
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user's session. IBM X-Force ID: 123230...
CVE-2017-1170
CVE-2017-1170 affects IBM WebSphere Commerce 8.0 (Enterprise, Professional, Express, Developer). A local user can hijack another user’s session, indicating a local elevation of privileges with partial confidentiality/integrity/availability impact. The provided documents do not specify the root ca...