CVE-2016-6090

IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user personal data, performing of unauthorized administrative operations, and potentially causing a denial of service...

CVE-2017-3296

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3296

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Design/Logic Flaw

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3296

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3296

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 10.0.3.5, 10.2.0.5 and 11.2.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3296

CVE-2017-3296 affects Oracle Commerce Platform (Dynamo Application Framework) with affected versions 10.0.3.5, 10.2.0.5, and 11.2.0.2. The vulnerability allows an unauthenticated attacker, with network access via HTTP, to compromise the platform and read a subset of data; exploitation requires hu...

SalesCloud - Critical - Unsupported - SA-CONTRIB-2017-008

This module Connects Drupal to SalesCloud's API, a Commerce Platform as a Service. CVE identifiers issued ACVE identifier will be requested, and added upon issuance, in accordance with Drupal Security Team processes. Versions affected All versions Drupal core is not affected. If you do not use th...

Unspecified Vulnerability in Oracle Commerce Platform

Oracle Commerce Platform is the United States Oracle Oracle company's set of e-business solutions platform. An unspecified vulnerability exists in Oracle Commerce Platform. An attacker could exploit the vulnerability by leveraging the 'HTTP' protocol to compromise the 'Dynamo Application Framewor...

MS12-027: Description of the security update for Microsoft Commerce Server 2009 R2: April 10, 2012

Describes the security update for Microsoft Commerce Server 2009 R2 that was released on April 10, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-027. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS12-027: Description of the security update for Microsoft Commerce Server 2007 Service Pack 2: April 10, 2012

Describes the security update for Microsoft Commerce Server 2007 that was released on April 10, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-027. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

Cross-Site Request Forgery Vulnerability in TinyShop

TinyShop is an e-commerce system online store system based on the Tiny framework, suitable for businesses and individuals to quickly build a personalized online store. TinyShop is vulnerable to cross-site request forgery. As the program fails to filter user input, an attacker can exploit the...

Tales of WordPress Plugin Insecurity Overblown Researchers Say

The insecurity of WordPress plugins has been well documented, especially over the last year, but in the grand scheme of things, it’s not as bad as it seems, experts claim. Hendrik Buchwald, a researcher and cofounder of RIPS, a German firm that performs static source code analysis, recently combe...

Experts Explain How Hackers Can Hack Your Credit Cards In Seconds

As India attempts an upgrade to a cashless society, cyber security experts have raised serious concerns and revealed how to find credit card information – including expiration dates and CVV numbers – in just 6 Seconds. And what's more interesting? The hack uses nothing more than guesswork by...

TomatoCart 'step_5.php' Cross-Site Scripting Vulnerability

TomatoCart is a set of open source e-commerce software developed using PHP. A cross-site scripting vulnerability exists in TomatoCart 'step5.php'. An attacker can exploit the vulnerability to execute arbitrary script code in an unsuspecting user's browser within the context of the affected site...

Convenient Mobile Commerce is the Key to Success this Holiday Season

With the Black Friday, Cyber Monday holiday weekend upon us, retailers in the U.S. and abroad are preparing for another peak period for customer acquisition and commerce revenues. In 2016, the U.S. eCommerce market is the second largest globally and...

WordPress Plugins Leave Online Shoppers Vulnerable

Researchers are calling into question the safety of some of the top WordPress e-commerce plugins used on over 100,000 commercial websites prepping for Black Friday and Cyber Monday online sales. In reviewing the top 12 WordPress e-commerce plugins, application security testing firm Checkmarx foun...

merchants.ebaycommercenetwork.com XSS vulnerability

Vulnerable URL: https://merchants.ebaycommercenetwork.com/messages.jsp?langCode=enUS" Details: Description| Value ---|--- Patched:| Yes, at 17.03.2017 Latest check for patch:| 17.03.2017 07:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

merchant.ebaycommercenetwork.com XSS vulnerability

Vulnerable URL: https://merchant.ebaycommercenetwork.com/messages.jsp?langCode=enUS" Details: Description| Value ---|--- Patched:| Yes, at 17.03.2017 Latest check for patch:| 17.03.2017 07:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

SAP Hybris E-commerce Suite SQL Injection Vulnerability

SAP Hybris Management Console HMC is a suite of enterprise-class multichannel e-commerce and product content management PCM software from SAP. An injection vulnerability exists in SAP Hybris E-commerce Suite that stems from the program failing to adequately filter user-submitted input. An attacke...