2601 matches found
Four Main Reasons Shoppers Abandon eCommerce Carts
More than just window shopping eCommerce shopping cart abandonment causes brands a sobering USD 18 Billion in annual revenue Forrester Research. While rates differ by device, with mobile and tablet device users most likely to leave before completing their order, nearly 70 percent of shoppers dese...
Malicious code in paypay-sample-ecommerce-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09b31b1430f2e801aefc6f5a16cfbd3d5311746728695bc5d3ae462fbba5049d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5249 Malicious code in paypay-sample-ecommerce-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09b31b1430f2e801aefc6f5a16cfbd3d5311746728695bc5d3ae462fbba5049d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in paypay-ecommerce-miniapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1b7ace2d557b78c19ca9d9f0d89799a93ced84a6b8f9715dfcc460999be4178 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5248 Malicious code in paypay-ecommerce-miniapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1b7ace2d557b78c19ca9d9f0d89799a93ced84a6b8f9715dfcc460999be4178 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6781 Malicious code in unified-instantsearch-ecommerce (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ff80f1a6e2f93cac154151478390d6909157ebbba55f755e1b48279cb83bc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in unified-instantsearch-ecommerce (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ff80f1a6e2f93cac154151478390d6909157ebbba55f755e1b48279cb83bc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-30478
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \searchproduct.php via the keyword parameters...
CVE-2022-30482
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...
CVE-2022-30478
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \searchproduct.php via the keyword parameters...
CVE-2022-30482
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...
Cross site scripting
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...
Sql injection
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \searchproduct.php via the keyword parameters...
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 跨站脚本漏洞
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar is an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to a cross-site scripting vulnerability that stems from The ctgname parameter on the adminaddcata.php page lacks a checksum filter for...
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar SQL注入漏洞
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to SQL injection, which stems from The keyword parameter of the searchproduct.php page lacks validation for external input SQL statements. An...
CVE-2022-30478
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \searchproduct.php via the keyword parameters...
CVE-2022-30478
CVE-2022-30478 affects the package “Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0.” The vulnerability is a SQL Injection in search_product.php triggered by the keyword parameter, due to lack of input validation. Public records (NVD, RH, CNVD, CNNVD, CNVD, etc.) consistently describe it a...
CVE-2022-30482
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...
CVE-2022-30482
Vulnerability summary: The package named “Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0” is vulnerable to Cross Site Scripting (XSS) in the administrative page admin/add_cata.php via the ctg_name parameter. Root cause: The ctg_name input/output handling lacks a checksum/adequate filteri...
ShopXO 代码问题漏洞
ShopXO is an open source enterprise-level open source e-commerce system. A security vulnerability exists in ShopXO version 2.2.0, which originates from an arbitrary file upload issue in three locations...