1492 matches found
Cross site scripting
A Reflected Cross-Site Scripting XSS vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials...
CVE-2020-23831
CVE-2020-23831 describes a reflected XSS in the SourceCodester Stock Management System v1.0, specifically in the index.php login-portal page. The vulnerability allows an unauthenticated user to lure a victim to a malicious URL and, when credentials are entered, potentially harvest credentials and...
CVE-2020-23831
A Reflected Cross-Site Scripting XSS vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials...
PT-2020-15589
Name of the Vulnerable Software and Affected Versions SourceCodester Stock Management System version 1.0 Description A Reflected Cross-Site Scripting XSS issue in the index.php login-portal webpage allows remote attackers to harvest login credentials and session cookies when an unauthenticated...
CVE-2020-23831: Improper Neutralization of Input During Web Page Generation
A Reflected Cross-Site Scripting XSS vulnerability in the index.php login-portal webpage of SourceCodester Stock Management System v1.0 allows remote attackers to harvest login credentials and session cookies when an unauthenticated victim clicks on a malicious URL and enters credentials...
How Financial Apps Get You to Spend More and Question Less
You should never invest without fully understanding the risks, but tax prep and stock trading services often obfuscate the things you really need to know...
stock-channel.net Cross Site Scripting vulnerability OBB-1257708
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Stock Management System 1.0 - Authentication Bypass Vulnerability
Exploit for php platform in category web applications Exploit Title: Stock Management System 1.0 - Authentication Bypass Exploit Author: Adeeb Shah @hyd3sec Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/14366/stock-management-system-php.html...
Stock Management System 1.0 Cross Site Request Forgery
Exploit Title: Stock Management System v1.0 - Cross-Site Request Forgery Change Username Exploit Author: Bobby Cooke Date: 2020-08-01 Vendor Homepage: https://www.sourcecodester.com/php/14366/stock-management-system-php.html Software Link:...
londonstockexchange.exchange Cross Site Scripting vulnerability OBB-1241296
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Shopify: IDOR on stocky application-Low Stock-Varient-Settings-Columns
Hello, I have found a IDOR on stocky application Low Stock-Varient-Settings-Columns attribute, in fact malicious user can change the columns of another user. POC: 1Create two user A and B, login to A and create a store, test.myshopify.com login to user B and create a store test1.myshopify.com...
Big Research Insider Edition has a dll hijacking vulnerability
Big Research Insider Edition is a stock speculation software. Big Research Insider Edition suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...
Command Execution Vulnerability in Flush Cloud
Flush Cloud is a stock analysis and trading software launched by Zhejiang Nuclear New Flush Network Information Co. Flush Cloud Computing suffers from a command execution vulnerability that can be exploited by attackers to execute malicious code...
stock-channel.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1127649 Security Researcher g0bl1nsec Helped patch 3741 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting stock-channel.net website...
Code Execution Vulnerability at Futura Bulls
FT Bull is a new Hong Kong stock software that combines quotes and trading in one. A code execution vulnerability exists in FTNB, which can be exploited by attackers to execute arbitrary code...
PrestaShop Adobe Stock API integration file upload vulnerability
PrestaShop is an open source e-commerce solution. PrestaShop Adobe Stock API integration reset/modules/advancedformmakeredit/multiupload/upload.php A file upload vulnerability exists that allows remote attackers to submit a special request that can be exploited to upload . php file and execute it...
PrestaShop Adobe Stock API integration code issue vulnerability
PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The solution provides a variety of payment methods , short message alerts and product image scaling , etc. Adobe Stock API integration is one of the plug-ins to support the search of video and image assets . A security...
CVE-2019-19594
reset/modules/fotoliaFoto/multiupload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote attackers to execute arbitrary code by uploading a .php file...
CVE-2019-19595
reset/modules/advancedformmakeredit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allows remote attackers to execute arbitrary code by uploading a .php file...
CVE-2019-19595
reset/modules/advancedformmakeredit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allows remote attackers to execute arbitrary code by uploading a .php file...