CVE-2021-28110

/exec in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a vulnerability in its XML parser...

CVE-2021-28126

index.jsp in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a Stored cross-site scripting XSS vulnerability...

Code injection

/exec in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a vulnerability in its XML parser...

Cross site scripting

index.jsp in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a Stored cross-site scripting XSS vulnerability...

CVE-2021-28110

/exec in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a vulnerability in its XML parser...

CVE-2021-28126

index.jsp in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a Stored cross-site scripting XSS vulnerability...

CVE-2021-28126

index.jsp in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a Stored cross-site scripting XSS vulnerability...

CVE-2021-28126

The CVE-2021-28126 entry concerns TranzWare e-Commerce Payment Gateway (TWEC PG) prior to version 3.1.27.5, where index.jsp contains a stored XSS vulnerability. This is documented across multiple connected records (Red Hat, NVD, CVE lists, and regional advisories) and is specific to the TWEC PG’s...

CVE-2021-28110

/exec in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a vulnerability in its XML parser...

CVE-2021-28110

CVE-2021-28110 affects TranzWare e-Commerce Payment Gateway (TWEC PG) prior to version 3.1.27.5, due to a vulnerability in its XML parser. The issue is described without exploitation details in the provided sources, with CVSSv3.1 base score 7.5 (Network attack, no privileges required, high availa...

PT-2021-17746

Name of the Vulnerable Software and Affected Versions: TranzWare e-Commerce Payment Gateway TWEC PG versions prior to 3.1.27.5 Description: The issue is related to a vulnerability in the XML parser of the /exec endpoint in TranzWare e-Commerce Payment Gateway TWEC PG. This vulnerability affects...

A3MALL e-commerce system open source version of unauthorized access vulnerability

A3MALL e-commerce system open source version is an open source free mall system. A3MALL e-commerce system open source version of unauthorized access vulnerability , attackers can use the vulnerability to obtain sensitive information...

CVE-2021-28110: Improper Restriction of XML External Entity Reference

/exec in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a vulnerability in its XML parser...

PT-2021-17759

Name of the Vulnerable Software and Affected Versions: TranzWare e-Commerce Payment Gateway TWEC PG versions prior to 3.1.27.5 Description: The issue is related to a Stored cross-site scripting XSS vulnerability in the index.jsp file. This vulnerability allows for the storage of malicious scripts...

CVE-2021-28126: Improper Neutralization of Input During Web Page Generation

index.jsp in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a Stored cross-site scripting XSS vulnerability...

OurPHP suffers from an arbitrary file deletion vulnerability (CNVD-2021-24983)

OurPHP is an enterprise e-commerce marketing website building system. OurPHP has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete any file under the server...

Cross site scripting

The aimeos aka Aimeos shop and e-commerce framework extension before 19.10.12 and 20.x before 20.10.5 for TYPO3 allows XSS via a backend user account...

CVE-2021-28380

The aimeos aka Aimeos shop and e-commerce framework extension before 19.10.12 and 20.x before 20.10.5 for TYPO3 allows XSS via a backend user account...

Magecart Attackers Save Stolen Credit-Card Data in .JPG File

Magecart attackers have found a new way to hide their nefarious online activity by saving data they’ve skimmed from credit cards online in a .JPG file on a website they’ve injected with malicious code. Researchers at website security firm Sucuri discovered the elusive tactic recently during an...

Alphaware E-Commerce System 1.0 - Unauthenicated Remote Code Execution Exploit

Exploit Title: Alphaware E-Commerce System 1.0 - Unauthenicated Remote Code Execution File Upload + SQL injection Exploit Author: Christian Vierschilling Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/11676/alphaware-simple-e-commerce-system.html...