83 matches found
CVE-2023-6047 Reflected XSS in Algoritim E-commerce Software
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Algoritim E-commerce Software allows Reflected XSS. This issue affects E-commerce Software: before 3.9.2...
CVE-2023-6047
CVE-2023-6047 describes a Reflected XSS in Algoritim E-commerce Software (pre-3.9.2) caused by improper neutralization of user input during web page generation. Affected software is specified as Algoritim E-commerce Software before version 3.9.2. The primary impact is cross-site scripting, enabli...
CVE-2023-4674
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yaztek Software Technologies and Computer Systems E-Commerce Software allows SQL Injection.This issue affects E-Commerce Software: through 20231229. NOTE: The vendor was contacted early about this...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yaztek Software Technologies and Computer Systems E-Commerce Software allows SQL Injection.This issue affects E-Commerce Software: through 20231229. NOTE: The vendor was contacted early about this...
CVE-2023-4674
CVE-2023-4674 affects Yaztek Software Technologies and Computer Systems’ E-Commerce Software (through 20231229). The vulnerability is an SQL Injection due to improper neutralization of special elements in an SQL command. Affected component/attack surface is the E‑Commerce Software product as rele...
Yaztek Software Technologies and Computer Systems E-Commerce Software SQL Injection Vulnerability
Yaztek Software Technologies and Computer Systems E-Commerce Software is an e-commerce system from Yaztek Software Technologies and Computer Systems. A security vulnerability exists in Yaztek Software Technologies and Computer Systems E-Commerce Software 20231229 and earlier versions, which stems...
CVE-2023-6145 SQLi in Softomi E-commerce Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection. This issue affects Softomi Advanced C2C Marketplace Software: before 121220...
CVE-2023-6122 Reflected XSS in Softomi E-commerce Software
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Gelişmiş C2C Pazaryeri Yazılımı allows Reflected XSS. This issue affects Softomi Gelişmiş C2C Pazaryeri Yazılımı: before 12122023...
CVE-2023-4406
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KC Group E-Commerce Software allows Reflected XSS. This issue affects E-Commerce Software: through 20231123. NOTE: The vendor was contacted early about this disclosure but did not respond in any wa...
CVE-2023-4406
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KC Group E-Commerce Software allows Reflected XSS. This issue affects E-Commerce Software: through 20231123. NOTE: The vendor was contacted early about this disclosure but did not respond in any wa...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KC Group E-Commerce Software allows Reflected XSS.This issue affects E-Commerce Software: through 20231123. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2023-4406 XSS in KC Group's E-Commerce Software
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in KC Group E-Commerce Software allows Reflected XSS. This issue affects E-Commerce Software: through 20231123. NOTE: The vendor was contacted early about this disclosure but did not respond in any wa...
Sitolog SQL Injection Vulnerability
Sitolog is an e-commerce management software from the French company Sitolog. A security vulnerability exists in Sitolog v7.8.a and earlier versions, which originates from a SQL injection vulnerability in the sitolog application connect module...
CVE-2023-4531
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection. This issue affects E-commerce Software: before 20230901...
CVE-2023-4531
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection.This issue affects E-commerce Software: before 20230901...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection.This issue affects E-commerce Software: before 20230901...
CVE-2023-4531 SQLi in Mestavs E-commerce Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection. This issue affects E-commerce Software: before 20230901...
CVE-2023-4531
CVE-2023-4531 describes an SQL injection vulnerability in Mestav Software E-commerce Software, arising from improper neutralization of special elements used in SQL commands. Affected versions are before 20230901. The issue could allow an attacker to manipulate queries and impact confidentiality, ...
Mestav Software E-commerce Software SQL Injection Vulnerability
Mestav Software E-commerce Software is an e-commerce software from Mestav Software, Turkey. An SQL injection vulnerability exists in Mestav Software E-commerce Software versions prior to 20230901, which stems from susceptibility to SQL injection attacks...
CVE-2023-3651
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Digital Ant E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: before 11...