File Upload Vulnerability in Laike E-commerce System (CNVD-2020-13871)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A file upload vulnerability exists in the Laike E-commerce system, which can be exploited by attackers to gain control of the web server...

XSS vulnerability in jeecms

jeecms is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with payment and financial settlement of the content of the e-commerce as one of the content...

CVE-2014-4559

Multiple cross-site scripting XSS vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 apikey, 2 paymentpageurl, 3 merchantid, 4 apiurl, or 5 currency parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 apikey, 2 paymentpageurl, 3 merchantid, 4 apiurl, or 5 currency parameter...

CVE-2014-4559

CVE-2014-4559 is an XSS vulnerability in the Swipe Checkout for WP e-Commerce plugin (WordPress) affecting test-plugin.php, version 3.1.0 and earlier. The issue allows remote injection of arbitrary script/HTML via the parameters api_key, payment_page_url, merchant_id, api_url, or currency. Connec...

CVE-2014-4559

Multiple cross-site scripting XSS vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 apikey, 2 paymentpageurl, 3 merchantid, 4 apiurl, or 5 currency parameter...

CVE-2014-4559: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in test-plugin.php in the Swipe Checkout for WP e-Commerce plugin 3.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 apikey, 2 paymentpageurl, 3 merchantid, 4 apiurl, or 5 currency parameter...

PT-2019-7118

Name of the Vulnerable Software and Affected Versions Swipe Checkout for WP e-Commerce plugin versions 3.1.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the api key, payment page url, merchant id, api url, or currency parameter in the...

File Upload Vulnerability in Laike Ecommerce Management System

Laike e-commerce system is an open source e-commerce system. Laike E-commerce Management System suffers from a SQL injection vulnerability that can be exploited by attackers to gain server privileges...

Rooster Teeth Attack Showcases New Magecart Approach

The online store for the Rooster Teeth video-streaming service has been hit with a malicious web redirect attack by Magecart, which allowed the cybercriminals to harvest users’ payment-card details. The attack marks a slight departure from the group’s typical tactics. Rooster Teeth, which offers...

SQL Injection Vulnerability in the Frontend of Dascommerce Mall System

Big Business Mall System is a business creation network based on ten years of reconstruction of the e-commerce architecture, to create a set of operators, suppliers, purchasers, users, distribution, etc., in the PC and mobile devices are compatible with the operation of a complete set of offline ...

Unspecified Vulnerability in Sylius

Sylius is a set of Symfony framework based on open source e-commerce platform . A security vulnerability exists in Sylius that can be exploited by an attacker to view internal system messages...

SQL Injection Vulnerability in Laike E-commerce System (CNVD-2020-01257)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

SQL Injection Vulnerability in Laike E-commerce System (CNVD-2020-01258)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

SQL Injection Vulnerability in Laike E-commerce System (CNVD-2020-00775)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

SQL Injection Vulnerability in Laike E-commerce System

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

SQL Injection Vulnerability in Laike E-commerce System (CNVD-2020-00511)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

How to Protect Holiday Shoppers from Bots and Scammers

It’s the most wonderful time of year for gift card scammers. With Black Friday, Cyber Monday and the holidays just around the corner, consumers will spend billions on gift cards for hard-to-shop-for friends, family, and colleagues. Imperva VP Tiffany Olson Kleemann was interviewed on Good Morning...

Magecart Group Switches Up Tactics with MiTM, Phishing

A fresh splinter group under the Magecart umbrella has been discovered ramping up activity starting in August-September of 2019. It’s using a unique codebase and different tactics to carry out its attacks, according to researchers. Magecart is an umbrella term encompassing several different threa...

File upload vulnerability in the pr***.cl***.php file of the Laikai e-commerce system

Laike e-commerce system is an open source e-commerce system. A file upload vulnerability exists in the pr.cl.php file of Laikai E-commerce System. Attackers can use this vulnerability to obtain server privileges...