PT-2017-14925

Name of the Vulnerable Software and Affected Versions Secure E-commerce Script version 2.0.1 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters include searchmain or searchcat in the "category.php" endpoint,...

CVE-2017-17629: Improper Neutralization of Special Elements used in an SQL Command

Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...

Secure E-commerce Script 2.0.1 SQL Injection

Exploit Title: Secure E-commerce Script 2.0.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version: 2.0.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Explo...

Secure E-commerce Script 2.0.1 - searchcat searchmain SQL Injection

Secure E-commerce Script 2.0.1 - searchcat searchmain SQL Injection Exploit Title: Secure E-commerce Script 2.0.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version:...

E-commerce MLM Software 1.0 SQL Injection

Exploit Title: E-commerce MLM Software 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/e-commerce-mlm/ Demo: http://74.124.215.220/advaemlm/ Version: 1.0 Category: Webapps Tested on:...

Secure E-commerce Script 2.0.1 - searchcat / searchmain SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Secure E-commerce Script 2.0.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version: 2.0.1 Category:...

Secure E-commerce Script 2.0.1 - 'searchcat' / 'searchmain' SQL Injection

Exploit Title: Secure E-commerce Script 2.0.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version: 2.0.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Explo...

E-commerce MLM Software 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: E-commerce MLM Software 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/e-commerce-mlm/ Demo: http://74.124.215.220/advaemlm/...

E-commerce MLM Software 1.0 - SQL Injection

E-commerce MLM Software 1.0 - SQL Injection Exploit Title: E-commerce MLM Software 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/e-commerce-mlm/ Demo: http://74.124.215.220/advaemlm/ Version: 1...

E-commerce MLM Software 1.0 - SQL Injection

Exploit Title: E-commerce MLM Software 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/e-commerce-mlm/ Demo: http://74.124.215.220/advaemlm/ Version: 1.0 Category: Webapps Tested on:...

PayPal Subsidiary Data Breach Hits Up to 1.6 Million Customers

Global e-commerce business PayPal has disclosed a data breach that may have compromised personally identifiable information for roughly 1.6 million customers at a payment processing company PayPal acquired earlier this year. PayPal Holdings Inc. said Friday that a review of its recently acquired...

Feds Seize Over 20,500 Domain Names For Selling Counterfeit Products

In a coordinated International cyber operation, law enforcement agencies have seized over 20,520 website domains for illegally selling counterfeit products, including luxury products, sportswear, electronics, pharmaceuticals and online piracy on e-commerce platforms and social networks...

What to expect for this year's Black Friday and Cyber Monday

Last year during holidays, US online sales surpassed $122 billion. This represented a 12 percent increase over the previous year. But beyond the overall growth, what's more interesting is that sales at physical stores dropped by 10 percent, the result of ongoing consumer comfort with and adoption...

What to expect for this year's Black Friday and Cyber Monday

Last year during holidays, US online sales surpassed $122 billion. This represented a 12 percent increase over the previous year. But beyond the overall growth, what's more interesting is that sales at physical stores dropped by 10 percent, the result of ongoing consumer comfort with and adoption...

Singles’ Day deal seekers beware

Originally a day set aside for singles in China to be proud of their singlehood, Singles' Day has been transformed into what is arguably the world’s single largest e-commerce festival, thanks to the involvement of The Alibaba Group. In fact, the Alibaba Group alone reported $17.8 billion in sales...

SQL Injection Vulnerability in Royal 100 E-commerce System

Shenzhen Royal Network Technology Co., Ltd. provides e-commerce enterprises and e-commerce logistics enterprises with enterprise-level e-commerce logistics system and supply chain consulting, design, development and technical operation and maintenance support services. A SQL injection vulnerabili...

FS Trademe Clone - id SQL Injection

FS Trademe Clone - id SQL Injection Exploit Title: FS Trademe Clone - 'id' SQL Injection Date: 2017-10-24 Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/trademe-clone/ Version: 24 October 17 Tested on: Kali Linux 2.0 | Mac OS...

PHP Multi Vendor Script 1.02 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PHP Multi Vendor Script v1.02 - 'sid' Parameter SQL Injection Date: 2017-09-28 Exploit Author: 8bitsec Vendor Homepage: http://www.dexteritysolution.com/ Software Link:...

Why ArtsSEC decided to partner with Wallarm

by Maximiliano Soler, @maxisoler by Maximiliano Soller, CTO of ArtsSEC The greatest thing with partnerships is how well the organisations’ expertise complement each other. Our partnership with Wallarm has incredibly exceeded our expectations in their innovation and expertise in web application...

Magento 1.9.0.1 Cross-Site Scripting Vulnerability

Magento Web E-Commerce Platform is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...