E-Commerce System SQL注入漏洞

Moosikay E-Commerce System is an e-commerce system by the individual developer Arvin Arandilla. A SQL injection vulnerability exists in E-Commerce System version 1.0, which stems from an incorrect manipulation of the parameter id resulting in sql injection...

PT-2023-2219 · Sourcecodester · Sourcecodester E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Commerce System version 1.0 Description: A critical issue has been found in the processing of the file /ecommerce/admin/settings/setDiscount.php, which is related to a lack of protection of the SQL query structure. This issue...

PT-2023-17038 · Sourcecodester · Sourcecodester Alphaware Simple E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester Alphaware Simple E-Commerce System version 1.0 Description: A critical issue affects some unknown functionality of the file function/edit customer.php. The manipulation of the argument firstname/mi/lastname with the input a'...

Zhongbang CRMEB 代码问题漏洞

Zhongbang CRMEB is an open source e-commerce management system from Zhongbang Networks Zhongbang in Xi'an, China. A security vulnerability exists in CRMEB 3.1.0+, which stems from the strict domain name filtering in CRMEB 3.1.0+ leading to SSRF Server Side Request Forgery. No detailed vulnerabili...

SQL Injection Vulnerability in DBShop

DBShop is an e-commerce system. DBShop suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

File Upload Vulnerability in Verydows 2.0 Backend

Verydows is a free and open source e-commerce management system developed using PHP, featuring cross-platform, lightweight, high performance and strong security. Verydows 2.0 backend file upload vulnerability, attackers can exploit the vulnerability to obtain server privileges...

SQL Injection Vulnerability in 5vshop E-commerce System of Shijiazhuang Zhenhong Network Technology Co.

5vshop belongs to Shijiazhuang Zhenghong Network Technology Co., Ltd, since 2004 has been committed to the enterprise Internet application of related services, engaged in enterprise, personal e-commerce website construction; e-commerce project planning, creativity, operation, to provide a...

File Upload Vulnerability in OurPHP website builder system

OurPHP Aopia website building system is a enterprise + e-commerce marketing website building system. A file upload vulnerability exists in the OurPHP website builder system, which can be exploited by attackers to gain control of the web server...

Magento Arbitrary Code Execution Vulnerability (CNVD-2020-32305)

Adobe Magento is the United States of America Odo than Adobe company's set of open source PHP e-commerce system. The system provides rights management , search engines and payment gateways , etc. Magento Commerce is the commercial version of Magento . Magento has an arbitrary code execution...

Jshop Small Program Mall has SQL Injection Vulnerability

Jshop small program mall is an open source e-commerce system, including WeChat small program, Alipay small program, APP, public number, H5 end, PC end, Jitterbug small program, today's headline small program, Pipi shrimp small program, watermelon video small program, for large and medium-sized...

SQL Injection Vulnerability in Laikepui E-commerce System of Hunan One Eight Network Technology Co. Ltd (CNVD-2020-25314)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. There is a SQL injection vulnerability in the Laike Push e-commerce system of Hunan One Eight Network Technology Co. Ltd, which can be exploited by an attacker to obtain...

DBshop is vulnerable to XSS

DBShop is an e-commerce system. DBshop suffers from an XSS vulnerability that can be exploited by an attacker to obtain an administrator cookie...

SQL Injection Vulnerability in Laike E-commerce Management System of Hunan One Eight Network Technology Co.

Laikipu e-commerce system focuses on interface aesthetics and user experience, creating a unique e-commerce system ecosystem. Hunan One Eight Network Technology Co., Ltd. Laike e-commerce management system there is a SQL injection vulnerability, the attacker can use the vulnerability to obtain...

SQL Injection Vulnerability in Laike E-commerce System (CNVD-2020-00510)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

File Upload Vulnerability in Laikai Ecommerce System

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A file upload vulnerability exists in the Laike Ecommerce system, which can be exploited by attackers to upload malicious files...

File upload vulnerability in the backend of shopxo e-commerce system

ShopXO is an open source enterprise-level open source e-commerce system. shopxo e-commerce system backend file upload vulnerability , an attacker can exploit the vulnerability to execute arbitrary PHP code...

File Upload Vulnerability in Laike E-commerce System V2.0

Laike e-commerce management system is a small program open source system. Laike Ecommerce System V2.0 has a file upload vulnerability that can be exploited by attackers to upload malicious files...

Magento cross-site scripting vulnerability (CNVD-2019-40745)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. Magento has a cross-site scripting vulnerability. Attackers can use this vulnerability to execute client-side cod...

Magento Arbitrary File Deletion Vulnerability (CNVD-2019-35412)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. Magento arbitrary file deletion vulnerability , an attacker can use the vulnerability to delete arbitrary files...

SQL Injection Vulnerability in s-cms E-commerce System

S-CMS e-commerce system is developed by php+mysql, the website is easy and fast to install. Search engine is more easy to crawl and index , provide more features to improve user-friendly experience . s-cms e-commerce system has a SQL injection vulnerability , attackers can exploit the vulnerabili...