cityshop.al Cross Site Scripting vulnerability OBB-3295348

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CityShop v5. 5. 8 sql injection 0day&background get the webshell method-vulnerability warning-the black bar safety net

Text/My5t3ry Saw yesterday on the Forum a friend asked CitySHOP background how to get a SHELL, just under the source code back to read the next, find the code with the zend encryption. The decryption after the reading, the vulnerability also really many, many parameters are$GET straight into the...