8524 matches found
CVE-2015-5009
CVE-2015-5009 corresponds to a Cross-Site Scripting (XSS) vulnerability in IBM WebSphere Commerce. Affected products include WebSphere Commerce 6.0 (through FP11) and 6.0 FP4, 7.0 (through FP9) and 7.0 FP5–FP8, and 8.0 prior to 8.0.0.1. The issue allows remote authenticated users to inject arbitr...
CVE-2015-5008
Cross-site scripting XSS vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and 8.0 before 8.0.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2015-5008
CVE-2015-5008: An XSS vulnerability in IBM WebSphere Commerce affecting 6.0 (including FP11) and 6.0 FP4, 7.0 (including FP9) and 7.0 FP5–8, and 8.0 before 8.0.0.1. Remote attackers can inject arbitrary web script or HTML via a crafted URL. Impact details in the sources indicate potential browser...
CVE-2015-5009
Cross-site scripting XSS vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and 8.0 before 8.0.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
IBM WebSphere Commerce Cross-Site Request Forgery Vulnerability
IBM WebSphere Commerce is = a suite of e-commerce solutions. The solution supports all sales business models, including B2C, B2B and B2B2C, on a single customer interaction platform. A cross-site request forgery vulnerability exists in IBM WebSphere Commerce that allows remote attackers to...
CVE-2015-5007
Cross-site request forgery CSRF vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 8 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 8 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...
CVE-2015-5007
Cross-site request forgery CSRF vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 8 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...
CVE-2015-5007
CVE-2015-5007 describes a cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce. Affected versions are 6.0 up to 6.0.0.11, 7.0 up to 7.0.0.9, and 7.0 Feature Pack 8. The issue allows remote authenticated users to hijack the authentication of arbitrary users via requests that i...
CVE-2015-5007
Cross-site request forgery CSRF vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 8 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...
IBM WebSphere Commerce Open Redirection Vulnerability
IBM WebSphere Commerce is a suite of e-commerce solutions. The solution supports all sales business models, including B2C, B2B, and B2B2C, on a single customer interaction platform.Aurora starter store is one of the page layout tools. An open redirection vulnerability exists in the Aurora starter...
CVE-2015-7397
Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referrer parameter...
Open redirect
Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referrer parameter...
CVE-2015-7397
Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referrer parameter...
CVE-2015-7397
The CVE-2015-7397 entry concerns IBM WebSphere Commerce’s Aurora starter store, where an open redirection vulnerability in the referrer parameter allows remote attackers to redirect users to arbitrary URLs, enabling phishing attempts. Affected software is WebSphere Commerce 7.0 through Feature Pa...
E-commerce platform of Beijing 3D World Technology Co., Ltd. suffers from java deserialization vulnerability
Ltd. is a professional software and application service provider of domestic inspection and testing management platform, master data management platform, e-commerce platform and so on. A java deserialization vulnerability exists in the e-commerce platform of Beijing 3D World Technology Co., Ltd...
SAP Hybris E-commerce Suite VirtualJDBC SQL Injection
Application: SAP Hybris E-commerce Vendor URL: SAP Bugs: SQL Injection Reported: 01.02.2016 Vendor response: 02.02.2016 Date of Public Advisory: 14.02.2016 Reference: SAP replied “Due to the fact that this issue is inside Hybris cloud we don’t provide a security note. Please mention inside your...
SAP Hybris E-commerce Suite VirtualJDBC - Default Credentials
Application: SAP Hybris E-commerce Suite Versions Affected: SAP Hybris E-commerce Suite 5.1.0.3 Vendor URL: SAP Bugs: Default credentials Reported: 01.02.2016 Vendor response: 02.02.2016 Date of Public Advisory: 10.05.2016 Author: Alexey Tyurin ERPScan VULNERABILITY INFORMATION Class: CWE-259 Use...
RCE via CSRF in osCmax
High-Tech Bridge Security Research Lab discovered 2 PHP Local File Inclusion vulnerabilities in osCmax, a popular web-based e-commerce application and shopping cart. The vulnerabilities can be exploited to execute arbitrary PHP code on the target system. Successful exploitation of these...
