3455 matches found
Command Execution Vulnerability in UFIDA NC (CNVD-2021-36505)
UFIDA NC is a large erp enterprise management system and e-commerce platform. UFIDA NC suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...
EC-CUBE cross-site scripting vulnerability (CNVD-2021-34683)
Ec-cube is an open source e-commerce system of the Japanese company Ec-cube . A cross-site scripting vulnerability exists in EC-CUBE versions 4.0.0 through 4.0.5. The vulnerability stems from a program that allows remote attackers to inject specially crafted script into specific input fields of E...
SQL Injection Vulnerability in Cross-border E-commerce Order System of Hualei Information Technology Co.
Founded in 2013, Hualei Information Technology Co., Ltd. is a professional information technology service provider. A SQL injection vulnerability exists in the cross-border e-commerce order system of Hualei Information Technology Co. An attacker can exploit the vulnerability to obtain sensitive...
Water Pamola Attacked Online Shops Via Malicious Orders
Since 2019, we have been tracking a threat campaign we dubbed as “Water Pamola.” The campaign initially compromised e-commerce online shops in Japan, Australia, and European countries via spam emails with malicious attachments...
Command execution vulnerability in CRMEB Min open source mall (CNVD-2021-34043)
CRMEB brand new a lightweight, high-performance open source e-commerce system . CRMEB Min open source mall there is a command execution vulnerability , an attacker can exploit the vulnerability to obtain server administrative privileges...
Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-39950)
Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is a seamless integration of a management suite. oracle iStore i...
Prestashop cross-site scripting vulnerability (CNVD-2021-29732)
Prestashop is a set of open source e-commerce solutions from the United States Prestashop. The solution provides a variety of payment methods , short message alerts and product image scaling and other features . PrestaShop has a security vulnerability , the vulnerability stems from when the grid...
ShopXO Access Control Error Vulnerability
ShopXO is an open source enterprise-level open source e-commerce system. Shopxo v1.4.0 and v1.5.0 has an Access Control Error vulnerability, which can be exploited to obtain privileges in "index.php" by manipulating the parameter "user id" in the HTML request...
Command Execution Vulnerability in UFIDA NC
UFIDA NC is a large erp enterprise management system and e-commerce platform. UFIDA NC suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...
XMall has an information leakage vulnerability
XMall is based on SpringBoot MyBatis e-commerce system , including the front mall system and backend management system . XMall has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
CVE-2021-21398
PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.7.3, an attacker can inject HTML when the Grid Column Type DataColumn is badly used. The problem is fixed in 1.7.7.3...
CVE-2021-21398
PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.7.3, an attacker can inject HTML when the Grid Column Type DataColumn is badly used. The problem is fixed in 1.7.7.3...
Design/Logic Flaw
PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.7.3, an attacker can inject HTML when the Grid Column Type DataColumn is badly used. The problem is fixed in 1.7.7.3...
CVE-2021-21398
CVE-2021-21398 affects PrestaShop prior to 1.7.7.3. The vulnerability arises when the Grid Column Type DataColumn is badly used, allowing an attacker to inject HTML. The issue is fixed in version 1.7.7.3. The connected documents do not provide exploitation details or in-the-wild status.
CVE-2021-21398 Possible XSS injection through DataColumn Grid class
PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.7.3, an attacker can inject HTML when the Grid Column Type DataColumn is badly used. The problem is fixed in 1.7.7.3...
MobiKwik Suffers Major Breach — KYC Data of 3.5 Million Users Exposed
Popular Indian mobile payments service MobiKwik on Monday came under fire after 8.2 terabytes TB of data belonging to millions of its users began circulating on the dark web in the aftermath of a major data breach that came to light earlier this month. The leaked data includes sensitive personal...
TYPO3 Aimeos shop and e-commerce framework cross-site scripting vulnerability
TYPO3 is a free and open source content management system. TYPO3 Aimeos shop and e-commerce framework suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code...
Apache OFBiz RCE Vulnerability
Apache OFBiz is an e-commerce platform for building medium-sized and large enterprise-class, cross-platform, cross-database, cross-application server multi-tier, distributed e-commerce applications. An RCE vulnerability exists in Apache OFBiz. An unauthenticated attacker can exploit this...