Alphaware Simple E-Commerce System Access Control Vulnerability

Alphaware Simple E-Commerce System is an e-commerce system by razormist individual developers. An Access Control Error vulnerability exists in SourceCodester Alphaware Simple E-Commerce System version 1.0, which stems from incorrect manipulation of the parameter amount resulting in incorrect acce...

CVE-2019-7441: Undefined Security Weakness

cgi-bin/webscr?cmd=cart in the WooCommerce PayPal Checkout Payment Gateway plugin 1.6.8 for WordPress allows Parameter Tampering in an amount parameter such as amount1, as demonstrated by purchasing an item for lower than the intended price. NOTE: The plugin author states it is true that the amou...

Biometric Shift Employee Management System Cross-Site Scripting Vulnerability (CNVD-2018-01397)

Biometric Shift Employee Management System is an employee management system. A cross-site scripting vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited via the amount parameter in the index.php?user=additiondeduction request...

CVE-2017-17993

Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=additiondeduction request...

CVE-2017-17993

Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=additiondeduction request...

CVE-2017-17993

Biometric Shift Employee Management System is affected by a cross-site scripting (XSS) vulnerability exposed via the amount parameter in the index.php?user=addition_deduction request. NVD records show XSS with CVSS v2 base score 3.5 (LOW) and a CVSS v3 base score of 5.4 (MEDIUM); attack vector is...

PT-2017-15149

Name of the Vulnerable Software and Affected Versions Biometric Shift Employee Management System affected versions not specified Description The issue concerns a problem where an attacker can execute malicious scripts. This is possible due to the lack of proper validation of user input in the...

CVE-2017-17993: Improper Neutralization of Input During Web Page Generation

Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=additiondeduction request...

CVE-2009-4715

Cross-site scripting XSS vulnerability in rates.php in Real Time Currency Exchange allows remote attackers to inject arbitrary web script or HTML via the Amount parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in rates.php in Real Time Currency Exchange allows remote attackers to inject arbitrary web script or HTML via the Amount parameter...

CVE-2009-4715

CVE-2009-4715 describes a cross-site scripting (XSS) vulnerability in rates.php of Real Time Currency Exchange, exploitable via the Amount parameter to inject arbitrary scripts/HTML. The issue is associated with user-supplied input not being properly sanitized, enabling script execution in a vict...

CVE-2009-4715

Cross-site scripting XSS vulnerability in rates.php in Real Time Currency Exchange allows remote attackers to inject arbitrary web script or HTML via the Amount parameter...

CVE-2009-4715: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in rates.php in Real Time Currency Exchange allows remote attackers to inject arbitrary web script or HTML via the Amount parameter...