Magento Downloadable Products Cross Site Scripting Vulnerability

Magento suffers from downloadable product information related cross site scripting vulnerabilities. Versions affected include Magento 2.0 prior to 2.0.18, Magento 2.1 prior to 2.1.12, and Magento 2.2 prior to 2.2.3. Advisory Title: Magento Stored Cross-Site Scripting a Downloadable Products...

Magento Backups Cross Site Request Forgery Vulnerability

Magento Backups suffer from a cross site request forgery vulnerability. Versions affected include Magento Open Source prior to 1.9.3.8, Magento Commerce prior to 1.14.3.8, Magento 2.0 prior to 2.0.18, Magento 2.1 prior to 2.1.12, and Magento 2.2 prior to 2.2.3. Advisory Title: Magento Backups...

Magento Backups Cross Site Request Forgery

DefenseCode Security Advisory Magento Backups Cross-Site Request Forgery Advisory ID: DC-2018-03-001 Advisory Title: Magento Backups Cross-Site Request Forgery Advisory URL: http://www.defensecode.com/advisories.php Software: Magento Version: Magento Open Source prior to 1.9.3.8, Magento Commerce...

Magento User Info Cross Site Scripting

DefenseCode Security Advisory Magento Multiple Stored Cross-Site Scripting Vulnerabilities Advisory ID: DC-2018-03-002 Advisory Title: Magento Multiple Stored Cross-Site Scripting Vulnerabilities Advisory URL: http://www.defensecode.com/advisories.php Software: Magento Version: Magento 2.0 prior ...

Magento Product Attributes Cross Site Scripting

DefenseCode Security Advisory Magento Stored Cross-Site Scripting a Product Attributes Advisory ID: DC-2018-03-004 Advisory Title: Magento Stored Cross-Site Scripting a Product Attributes Advisory URL: http://www.defensecode.com/advisories.php Software: Magento Version: Magento 2.0 prior to 2.0.1...

Magento Downloadable Products Cross Site Scripting

DefenseCode Security Advisory Magento Stored Cross-Site Scripting a Downloadable Products Advisory ID: DC-2018-03-003 Advisory Title: Magento Stored Cross-Site Scripting a Downloadable Products Advisory URL: http://www.defensecode.com/advisories.php Software: Magento Version: Magento 2.0 prior to...

Magento CMS Admin Panel HTML Injection Vulnerability

Magento CMS is the United States Magento company's set of open source PHP e-commerce content management system CMS. An HTML injection vulnerability exists in Magento CMS. An attacker can exploit the vulnerability to execute arbitrary script code on the browsers of affected website users, steal...

Magento CMS APIs Cross-Site Request Forgery Vulnerability

Magento CMS is an open source PHP e-commerce content management system CMS of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions . A cross-site request forgery vulnerability exists in the Magento CMS APIs, which stems...

Magento CMS Admin Panel Remote Code Execution Vulnerability

Magento CMS is the United States Magento company's set of open source PHP e-commerce content management system CMS. A remote code execution vulnerability exists in the Magento CMS administration panel. An attacker can exploit the vulnerability to execute arbitrary code in the affected application...

Magento CMS Email Alerts Remote Code Execution Vulnerability

Magento CMS is the United States Magento company's set of open source PHP e-commerce content management system CMS. A remote code execution vulnerability exists in the Magento CMS email alerts feature. An attacker can exploit the vulnerability to execute arbitrary code in the affected application...

Magento CMS Video Upload Feature Remote Code Execution Vulnerability

Magento CMS is the United States Magento company's set of open source PHP e-commerce content management system CMS. A remote code execution vulnerability exists in the Magento CMS video upload feature. An attacker can exploit the vulnerability to execute arbitrary code in the affected application...

Magento Commerce T2 - (attr) Persistent Web Vulnerability

Document Title: =============== Magento Commerce T2 - attr Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1459 Release Date: ============= 2018-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 14...

Magento Commerce T2 - (attr) Persistent Web Vulnerability

Document Title: =============== Magento Commerce T2 - attr Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1459 Release Date: ============= 2018-02-06 Vulnerability Laboratory ID VL-ID: ==================================== 14...

ciudaddemascotas.com XSS vulnerability

Open Bug Bounty ID: OBB-550640 Description| Value ---|--- Affected Website:| ciudaddemascotas.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Magento Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

boutique.psychologies.com XSS vulnerability

Open Bug Bounty ID: OBB-550441 Description| Value ---|--- Affected Website:| boutique.psychologies.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Magento Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Magento Commerce - CSRLF Web UI Security Vulnerability

Document Title: =============== Magento Commerce - CSRLF Web UI Security Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1573 Release Date: ============= 2018-01-19 Vulnerability Laboratory ID VL-ID: ==================================== 157...

OnePlus Site’s Payment System Reportedly Hacked to Steal Credit Card Details

This year's first bad news for OnePlus users—a large number of OnePlus customers are reporting of fraudulent credit card transactions after buying products from the Chinese smartphone manufacturer's official online store. The claim initially surfaced on the OnePlus support forum over the weekend...

Magento Connect T1 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Document Title: =============== Magento Connect T1 - Claim Persistent Vulnerability Vulnerability Class: ==================== Cross Site Scripting - Persistent Current Estimated Price: ======================== 1.000a! - 2.000a! Product & Servi...

Magento Commerce Server-Side Request Forgery Vulnerability

Exploit for php platform in category web applications Document Title: =============== Magento Commerce - SSRF & XSPA Web Vulnerability Vulnerability Class: ==================== Server Side Request Forgery Product & Service Introduction: =============================== Magento is an open source...

Magento Commerce Server-Side Request Forgery

Document Title: =============== Magento Commerce - SSRF & XSPA Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1631 Release Date: ============= 2018-01-03 Vulnerability Laboratory ID VL-ID: ==================================== 1631 Comm...