The Market of Billions -- Are You Prepared For The Peaks?

Yes, we truly are the market of billions! I love Graham D. Brown's distinctive representation of this massive business opportunity in South Asia in his Asia Matters report. In 2018, over 50% of the world's total online retail sales happened in the Asia-Pacific region. eMarketer reports that onlin...

Sales & Company Management System Cross-Site Scripting Vulnerability

Sales & Company Management System SCMS is a sales and company management system. The system includes features such as customer management, product management and tax management. A cross-site scripting vulnerability exists in the memberemail.php file in SCMS 2018-06-06 and prior versions, which ca...

Sales & Company Management System SQL Injection Vulnerability

Sales & Company Management System SCMS is a sales and company management system. The system includes features such as customer management, product management and tax management. A SQL injection vulnerability exists in the member/memberorder.php file in SCMS 2018-06-06 and earlier versions, which...

CVE-2018-19925

An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. It has SQL injection via the member/memberorder.php type parameter, related to the Ostate parameter...

CVE-2018-19924

An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. An email address can be modified in between the request for a validation code and the entry of the validation code, leading to storage of an XSS payload contained in the modified address...

Cross site request forgery (csrf)

An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. There is member/memberemail.php?action=edit CSRF...

Input validation

An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. An email address can be modified in between the request for a validation code and the entry of the validation code, leading to storage of an XSS payload contained in the modified address...

CVE-2018-19923

CVE-2018-19923 affects Sales & Company Management System (SCMS) up to 2018-06-06, with a Cross-Site Request Forgery (CSRF) in member/member_email.php?action=edit. Red Hat/CNVD/NVD entries corroborate the issue. CVSS details: CVSSv3 base score 8.8 (HIGH) with network access, user interaction requi...

CVE-2018-19924

An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. An email address can be modified in between the request for a validation code and the entry of the validation code, leading to storage of an XSS payload contained in the modified address...

Sales & Company Management System Privilege Permission and Access Control Vulnerability

Sales & Company Management System SCMS is a sales and company management system. The system includes features such as customer management, product management and tax management. A privilege permission and access control vulnerability exists in SCMS 2018-06-06 and prior versions, which can be...

CVE-2018-19654

An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. There is a discrepancy in username checking between a component that does string validation, and a component that is supposed to query a MySQL database. Thus, it is possible to register a new account with a...

Design/Logic Flaw

An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. There is a discrepancy in username checking between a component that does string validation, and a component that is supposed to query a MySQL database. Thus, it is possible to register a new account with a...

CVE-2018-19654

An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. There is a discrepancy in username checking between a component that does string validation, and a component that is supposed to query a MySQL database. Thus, it is possible to register a new account with a...

CVE-2018-19654

CVE-2018-19654 affects the Sales & Company Management System (SCMS) up to 2018-06-06. The issue is a discrepancy between a string-validation component and the MySQL query component, allowing registration of a new account with a username that already exists (e.g., test%c2) when the account is alre...

As Predicted, Mobile Continued eCommerce Dominance Over the Holiday Weekend

Akamai predicted in September 2018 that mobile shopping would continue its growth this holiday shopping season. That prediction held true as we saw mobile devices increase their share of Black Friday online shopping traffic volume to 57.55%, with desktop traffic dropping to 35.91%. And for the...

Navigate CMS File Disclosure

File disclosure vulnerability in Navigate CMS navigatedownload.php id parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

CVE-2018-19435

An issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection via the SortBy parameter...

CVE-2018-19435

An issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection via the SortBy parameter...

Sql injection

An issue was discovered in the Sales component in webERP 4.15. SalesInquiry.php has SQL Injection via the SortBy parameter...

CVE-2018-19435

CVE-2018-19435 describes a SQL injection in webERP 4.15, specifically in the Sales component's file SalesInquiry.php, exploitable through the SortBy parameter. Root cause per the description is unsanitized user input allowing injection into SQL queries, leading to potential disclosure/modificatio...