2558 matches found
CVE-2018-18430: Improper Neutralization of Input During Web Page Generation
An issue was discovered in DESTOON B2B 7.0. admin\setting.inc.php has XSS via the first text box to the admin.php URI...
PT-2018-14458
Name of the Vulnerable Software and Affected Versions DESTOON B2B version 7.0 Description An issue exists where CSRF is possible via the "admin.php" URI in an "action=add" request. Recommendations For DESTOON B2B version 7.0, consider implementing CSRF protection mechanisms, such as tokens, to...
File Upload Vulnerability in DESTOON B2B Website Management System
DESTOON B2B website management system is an open source B2B e-commerce industry portal solution based on PHP+MySQL. Currently, it has models of launchers, substations, malls, supply, requisition, quotation, companies, exhibitions, articles, information, PinPong, group purchasing, galleries,...
IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2018-19738)
IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An information disclosure vulnerability exists in IBM Sterlin...
Security Bulletin: Stack Trace Vulnerability Affects IBM B2B Advanced Communication (CVE-2016-0378)
Summary IBM B2B Advanced Communications has addressed the stack trace display issue when no default error page was set up. Vulnerability Details CVEID: CVE-2016-0378 DESCRIPTION: IBM B2B Advanced Communications could allow a remote attacker to obtain sensitive information caused by improper...
CVE-2018-1800
IBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2.6.1 could allow a local user to obtain highly sensitive information during a short time period when installation is occurring. IBM X-Force ID: 149607...
Code injection
IBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2.6.1 could allow a local user to obtain highly sensitive information during a short time period when installation is occurring. IBM X-Force ID: 149607...
CVE-2018-1800
IBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2.6.1 could allow a local user to obtain highly sensitive information during a short time period when installation is occurring. IBM X-Force ID: 149607...
CVE-2018-1800
IBM Sterling B2B Integrator Standard Edition vulnerable to an information-disclosure flaw during installation. Affected are 5.2.6.0 and 6.2.6.1 (IBM lists 5.2.6.0–5.2.6.3 as affected); an attacker with local access could obtain highly sensitive data in a short installation window. IBM’s security ...
CVE-2018-1800: Exposure of Sensitive Information to an Unauthorized Actor
IBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2.6.1 could allow a local user to obtain highly sensitive information during a short time period when installation is occurring. IBM X-Force ID: 149607...
PT-2018-14318
Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition versions 5.2.6.0 through 6.2.6.1 Description The issue allows a local user to obtain highly sensitive information during a short time period when installation is occurring. Recommendations For...
IBM Sterling B2B Integrator 5.2.0.1/5.2.6.3 - Cross-Site Scripting Vulnerability
Exploit for multiple platform in category web applications Exploit Title: IBM Sterling B2B Integrator persistent cross-site scripting Exploit Author: Vikas Khanna https://www.linkedin.com/in/leetvikaskhanna/ https://twitter.com/MRSHANUKHANNA Vendor Homepage:...
IBM Sterling B2B Integrator 5.2.0.1 / 5.2.6.3 Cross Site Scripting
Exploit Title: IBM Sterling B2B Integrator persistent cross-site scripting Exploit Author: Vikas Khanna https://www.linkedin.com/in/leetvikaskhanna/ https://twitter.com/MRSHANUKHANNA Vendor Homepage:...
IBM Sterling B2B Integrator 5.2.0.15.2.6.3 - Cross-Site Scripting
IBM Sterling B2B Integrator 5.2.0.15.2.6.3 - Cross-Site Scripting Exploit Title: IBM Sterling B2B Integrator persistent cross-site scripting Exploit Author: Vikas Khanna https://www.linkedin.com/in/leetvikaskhanna/ https://twitter.com/MRSHANUKHANNA Vendor Homepage:...
IBM Sterling B2B Integrator 5.2.0.1/5.2.6.3 - Cross-Site Scripting
Exploit Title: IBM Sterling B2B Integrator persistent cross-site scripting Exploit Author: Vikas Khanna https://www.linkedin.com/in/leetvikaskhanna/ https://twitter.com/MRSHANUKHANNA Vendor Homepage:...
premiumenergyboots.wayne-ent.com XSS vulnerability
Open Bug Bounty ID: OBB-661262 Description| Value ---|--- Affected Website:| premiumenergyboots.wayne-ent.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6....
PHP Scripts Mall Basic B2B Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Basic B2B Script is a B2B website system script from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Basic B2B Script version 2.0.0, which can be exploited by remote attackers to inject scripts via the First name, Last name, City, State, or...
CVE-2018-14541
PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields...