POS Codekop 访问控制错误漏洞

POS Codekop is an application. A security vulnerability exists in POS Codekop version v2.0 that stems from a corrupted authentication mechanism that allows an unauthenticated attacker to download sales data...

Sales Tracker Management System v1.0 - Multiple Vulnerabilities

Exploit Title: Sales Tracker Management System v1.0 – Multiple Vulnerabilities EXPLOIT-AUTHOR: AFFAN AHMED Vendor Homepage: Software Link: Version: 1.0 Tested on: Windows 11 + XAMPP CVE : CVE-2023-3184 ============================== CREDENTIAL TO USE ============================== ADMIN-ACCOUNT...

CVE-2023-32118

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPoperation SALERT – Fake Sales Notification WooCommerce plugin = 1.2.1 versions...

CVE-2023-32118

CVE-2023-32118 affects the WPoperation SALERT – Fake Sales Notification WooCommerce plugin, vulnerable in versions

PT-2023-23626 · WordPress · Wpoperation Salert – Fake Sales Notification

Name of the Vulnerable Software and Affected Versions: WPoperation SALERT – Fake Sales Notification WooCommerce plugin versions prior to 1.2.1 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts...

Security vulnerability in product bundling feature

Description Our e-commerce platform offers a bundled sales promotion feature, allowing an administrator to bind the sale of a product to an addon. However, we have identified a security vulnerability that exists in this feature. After an administrator cancels a bundle offer, users can still make...

CVE-2023-3184

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save. The manipulation of the argument firstname/middlename/lastname/username leads to cross sit...

CVE-2023-3184

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save. The manipulation of the argument firstname/middlename/lastname/username leads to cross sit...

Cross site scripting

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save. The manipulation of the argument firstname/middlename/lastname/username leads to cross sit...

CVE-2023-3184 SourceCodester Sales Tracker Management System cross site scripting

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save. The manipulation of the argument firstname/middlename/lastname/username leads to cross sit...

CVE-2023-3184

CVE-2023-3184 affects SourceCodester Sales Tracker Management System 1.0. The vulnerability is a cross-site scripting (XSS) issue in the endpoint /classes/Users.php?f=save, triggered by manipulating the arguments firstname, middlename, lastname, or username. Several connected sources confirm remo...

Sales Tracker Management System 跨站脚本漏洞

Sales Tracker Management System is a sales tracking management system by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in Sales Tracker Management System version 1.0, which stems from a problem with the file /classes/Users.php?f=save, where incorrect manipulation o...

Odoo Access Control Issue Vulnerability

Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python language, PostgreSQL as the database, and includes modules for sales management, inventory management, financial management and so on. An access control...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in VillaTheme Thank You Page Customizer for WooCommerce – Increase Your Sales plugin = 1.0.13 versions...

CVE-2022-46812

CVE-2022-46812 is a CSRF vulnerability in the VillaTheme Thank You Page Customizer for WooCommerce – Increase Your Sales plugin. Affected versions are those

The Hand-y Etiquette of Modern All-Remote Culture

In today’s fast-paced digital world, remote work has become the new normal. With the rise of video conferencing platforms like Zoom and Microsoft Teams, we have adapted to an all-remote culture where communication is largely virtual. One aspect of this culture that has become increasingly importa...

ltg-indraprastha.salesoffice.co.in Cross Site Scripting vulnerability OBB-3327054

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SafeGraph Lands US Air Force Contract After Targeting Abortion Clinics

Documents obtained by WIRED show SafeGraph, which sold location data related to Planned Parenthood visits, is now pursuing contracts with the US Air Force...

WordPress Formilla Edge Targeted Messaging Platform for Sales and Marketing Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software Formilla Edge Targeted Messaging Platform for Sales and Marketing Type Plugin Vulnerable versions = 1.0 Fixed in 1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID...

woodsautosales.com Cross Site Scripting vulnerability OBB-3269843

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...