CVE-2023-3660

CVE-2023-3660 concerns Campcodes Retro Cellphone Online Store 1.0. The vulnerability is an cross-site scripting (XSS) in an admin component: the file /admin/add_user_modal.php, where manipulation of the un argument enables XSS. A remote attack is possible and public exploits have been disclosed (...

CVE-2023-31820

An issue found in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function...

CVE-2023-3660: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/addusermodal.php. The manipulation of the argument un leads to cross site scripting. The attack may be launched remotely...

CVE-2023-31823: Cleartext Transmission of Sensitive Information

An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Marui Official Store function...

PT-2023-23476

Name of the Vulnerable Software and Affected Versions Entetsu Store version 13.4.1 Description An issue in Entetsu Store allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Entetsu Store function. Recommendations For Entetsu Store version...

PT-2023-23474

Name of the Vulnerable Software and Affected Versions Shizutetsu Store version 13.6.1 Description An issue in Shizutetsu Store allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function. Recommendations For Shizutetsu Store version 13.6.1...

CVE-2023-31704: Incorrect Authorization

Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role...

CVE-2023-31820: Missing Encryption of Sensitive Data

An issue found in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function...

CVE-2023-31822: Missing Encryption of Sensitive Data

An issue found in Entetsu Store v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Entetsu Store function...

Online Computer and Laptop Store security vulnerabilities

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. A security vulnerability exists in version 1.0 of Sourcecodester Online Computer and Laptop Store, which stems from vulnerability to a false access control attack that allows a remote...

Shizutetsu Store security vulnerability

Shizutetsu Store is a store website application from Shizutetsu, Inc. A security vulnerability exists in Shizutetsu Store version v.13.6.1, which originated from a vulnerability that allows remote attackers to access sensitive information via a channel access token in the miniapp function...

KEISEI STORE LIVRE KEISEI Security Vulnerabilities

KEISEI STORE LIVRE KEISEI is a supermarket application from KEISEI STORE, Inc. KEISEI STORE LIVRE A security vulnerability exists in KEISEI version v.13.6.1 that originates from a vulnerability that could allow a remote attacker to gain access to sensitive information via a channel access token i...

CVE-2023-31820

An issue found in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function...

CVE-2023-31704

Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role...

PT-2023-25627 · Unknown · Campcodes Retro Cellphone Online Store

Name of the Vulnerable Software and Affected Versions: Campcodes Retro Cellphone Online Store version 1.0 Description: A vulnerability was found in the software, classified as problematic, affecting some unknown functionality of the file /admin/add user modal.php. The manipulation of the un...

CVE-2023-31819

An issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function...

CVE-2023-31822

An issue found in Entetsu Store v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Entetsu Store function...

CVE-2023-31823

An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Marui Official Store function...

PT-2023-23477 · Unknown · Marui Official App

Name of the Vulnerable Software and Affected Versions: Marui Official app version 13.6.1 Description: The issue allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Marui Official Store function. Recommendations: For version 13.6.1, consider...

CVE-2023-31823

CVE-2023-31823 affects Marui Official app v13.6.1. The issue allows a remote attacker to access sensitive information via the channel access token used by the miniapp Store function (Marui Official Store). Impact is information disclosure; no exploitation details are provided beyond this descript...