NetShen E-commerce System Exists IIS Write Permission, Source Code Leakage Vulnerabilities

NetShen Information Technology Beijing Co., Ltd. is a high-tech information security solution, product and service provider integrating technology research and development, manufacturing and comprehensive service. NetShen's e-commerce system suffers from IIS write permission and source code leaka...

Multiple Cross-Site Request Forgery Vulnerabilities in Magento

Magento is a professional open source PHP e-commerce system from Magento, USA, which provides permission management, search engine and payment gateway. Magento has multiple cross-site request forgery vulnerabilities. Allow remote attackers to perform certain unauthorized operations...

IBM WebSphere Commerce Enterprise Information Disclosure Vulnerability

IBM WebSphere Commerce Enterprise is a suite of e-commerce solutions from IBM in the United States. The solution is primarily used for high-volume B2C and B2B business models and advanced platforms for multiple e-commerce sites. A security vulnerability exists in IBM WebSphere Commerce Enterprise...

CVE-2015-5015

IBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x before Feature Pack 8 allows remote attackers to obtain sensitive information via a crafted REST URL...

CVE-2015-5015

IBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x before Feature Pack 8 allows remote attackers to obtain sensitive information via a crafted REST URL...

Information disclosure

IBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x before Feature Pack 8 allows remote attackers to obtain sensitive information via a crafted REST URL...

CVE-2015-5015

IBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x before Feature Pack 8 allows remote attackers to obtain sensitive information via a crafted REST URL...

CVE-2015-5015

CVE-2015-5015 affects IBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x prior to Feature Pack 8. A remote attacker can obtain sensitive information via a crafted REST URL, indicating an information-disclosure vulnerability in the REST API surface. The root cause is an improper handling of REST UR...

CVE-2015-4827

Unspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle Retail Applications 3.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Framework...

Buffer overflow

Unspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle Retail Applications 3.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Framework...

CVE-2015-4827

Unspecified vulnerability in the Oracle Retail Open Commerce Platform component in Oracle Retail Applications 3.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Framework...

CVE-2015-4827

CVE-2015-4827 affects the Oracle Retail Open Commerce Platform component within Oracle Retail Applications 3.0. The vulnerability is described as allowing remote attackers to affect confidentiality and integrity via unknown vectors related to Framework. No root cause or specific exploit vectors a...

Magento E-Commerce Platform Magmi Plugin Information Disclosure

An information disclosure vulnerability has been discovered in Magento e-commerce platform Magmi Plugin. Successful exploitation results in access to Magento site credentials and database encryption key...

E-Commerce platform Magento plug-in is exposed 0day vulnerabilities-vulnerability warning-the black bar safety net

! Recently, the e-Commerce platform Magento, a very popular plug-in－Magmi is exposed out of the 0 day vulnerabilities, and there have been hackers use this vulnerability to attack. Magento is a professional open-source e-Commerce system. Magento design is very flexible, and also has a modular...

PayPal Inc Bug Bounty #117 - Session Fixation Vulnerability

Document Title: =============== PayPal Inc Bug Bounty 117 - Session Fixation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1509 EIBBP-31983 P2 Video: http://www.vulnerability-lab.com/getcontent.php?id=1615 Vulnerability Magazine:...

WordPress Collne Welcart e-Commerce Plugin <= 1.5.2 - Multiple SQL Injection

Multiple SQL Injection vulnerabilities are in admin.php in this plugin. These vulnerabilities allow an authenticated user to execute arbitrary SQL commands via the 1. searchcolumn or 2. switch parameter. Solution Update the plugin...

breal.net XSS vulnerability

Vulnerable URL: http://www.breal.net/ecommerce/recherche.cfm Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 100757 Google Pagerank| 0 VIP website status:|...

WordPress E-Commerce Shop Styling Plugin <= 2.5 - Local File Inclusion

This plugin is prone to a local file inclusion vulnerability, becuse the code in ./wp-ecommerce-shop-styling/includes/download.php is not sanitized. Solution Update the plugin...

CVE-2015-7231

The Commerce Commonwealth CBA module 7.x-1.x before 7.x-1.5 for Drupal does not properly validate payments, which allows remote attackers to make a failed payment appear valid via a crafted URL, related to a "response from commweb."...

Design/Logic Flaw

The Commerce Commonwealth CBA module 7.x-1.x before 7.x-1.5 for Drupal does not properly validate payments, which allows remote attackers to make a failed payment appear valid via a crafted URL, related to a "response from commweb."...