SQL Injection Vulnerability in Online Order Management System of Foshan Dute Software Technology Co.

Foshan Dutt Software Technology Co., Ltd, is a company specializing in the development and promotion of enterprise management software. Foshan Dutt Software Technology Co., Ltd. online order management system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensiti...

CVE-2020-23447

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office"...

CVE-2020-23447

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office"...

Cross site scripting

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office"...

CVE-2020-23447

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office"...

CVE-2020-23447

CVE-2020-23447 affects newbee-mall 1.0 with a cross-site scripting vulnerability in shop-cart/settle. An attacker can inject an XSS payload in the address information during purchase, triggered when viewing the Order Management Office’s “View Recipient Information.” Connected CNVD/CVEs corroborat...

newbee-mall 跨站脚本漏洞

newbee-mall is an e-commerce system. A cross-site scripting vulnerability exists in newbee-mall 1.0, where a user only needs to write an xss payload in the address information when purchasing a product, and the vulnerability is triggered when viewing the "View Recipient Information" of the order ...

File Upload Vulnerability in BenQ Order Management Platform of Chongqing BenQ Software Co.

Chongqing BenYi Software Co., Ltd. is an authorized marketing service organization under Kingdee International Software Group. It is mainly engaged in sales, implementation and after-sales service of Kingdee software. There is a file upload vulnerability in the order management platform of...

SAP Commerce Information Disclosure Vulnerability

SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. This product supports sales management, marketing management, order management and operations management. An information disclosure vulnerability exists in SAP Commerce. An attacker could exploit this vulnerability to...

SQL injection vulnerability in PIMS online order management system re***.php file

PIMS online order management system for single-page ordering sites, general product ordering sites and other ordering sites, designed to facilitate the full background management through the fast integration of Alipay, Paypal, eBao, netbank online, PayPal and other payment interfaces, management ...

PIMS online order management system ht***.php file has SQL injection vulnerability

PIMS online order management system for single-page ordering sites, general product ordering sites and other ordering sites, designed to facilitate the full background management through the fast integration of Alipay, Paypal, eBao, netbank online, PayPal and other payment interfaces, management ...

Security Bulletin: Apache Commons FileUpload Vulnerability Can Affect IBM Sterling Order Management (CVE-2016-1000031)

Summary IBM Sterling Order Management uses Apache Commons FileUpload and is affected by some of the vulnerabilities that exist in Apache Commons FileUpload. Vulnerability Details CVEID: CVE-2016-1000031 DESCRIPTION: Apache Commons FileUpload, as used in Novell NetIQ Sentinel and other products,...

SQL Injection Vulnerability in Duttware's Online Order Management System

Foshan Dutt Software Technology Co., Ltd. is a company specializing in the development and promotion of enterprise management software. A SQL injection vulnerability exists in the DuttSoft Online Order Management System. An attacker can exploit this vulnerability to obtain sensitive information i...

Security Bulletin: Apache Struts Vulnerability Can Affect IBM Sterling Order Management (CVE-2018-11776)

Summary IBM Sterling Order Management uses Apache Struts 2 and is affected by some of the vulnerabilities that exist in Apache Struts 2 Vulnerability Details CVEID: CVE-2018-11776 DESCRIPTION: Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by an error...

The vulnerability of the Product Diagnostic Tools component of the Order Management system allows a perpetrator to gain full control over the application.

The vulnerability of the Product Diagnostic Tools component in the Order Management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application...

Oracle E-Business Multiple Vulnerabilities (July 2018 CPU)

The version of Oracle E-Business installed on the remote host is missing the July 2018 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the July 2018 Critical Patch Update advisory : - An unspecified vulnerability in the Oracle One-to-One...

CVE-2018-2954

Vulnerability in the Oracle Order Management component of Oracle E-Business Suite subcomponent: Product Diagnostic Tools. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows low privileged attacker...

CVE-2018-2954

Vulnerability in the Oracle Order Management component of Oracle E-Business Suite subcomponent: Product Diagnostic Tools. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows low privileged attacker...

CVE-2018-2954

CVE-2018-2954 affects Oracle E-Business Suite Order Management, specifically the Product Diagnostic Tools subcomponent. The vulnerability impacts multiple supported 12.1.x and 12.2.x versions; it is exploitable by a low-privileged user with login to the hosting infrastructure and can lead to take...

CVE-2018-2954

Vulnerability in the Oracle Order Management component of Oracle E-Business Suite subcomponent: Product Diagnostic Tools. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows low privileged attacker...