Magento cross-site scripting vulnerability (CNVD-2019-40741)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. Magento has a cross-site scripting vulnerability. Attackers can use this vulnerability to execute client-side code...

Magento Remote Code Execution Vulnerability (CNVD-2019-40726)

Magento is an open source PHP e-commerce system from the U.S. company Magento. A remote code execution vulnerability exists in Magento. An attacker can exploit this vulnerability to achieve remote code execution...

SQL Injection Vulnerability in CmsWing

CMSWING is a powerful e-commerce platform and CMS builder based on ThinkJS. CmsWing suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

The vulnerability of the sub-component of the Dynamo Application Framework within the Oracle Commerce Platform of the e-commerce platform Oracle Commerce allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the sub-component of the Dynamo Application Framework within the Oracle Commerce Platform of the e-commerce platform Oracle Commerce is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data...

Magento cross-site scripting vulnerability (CNVD-2019-26222)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions . A cross-site scripting vulnerability exists in Magento Open Source, Magento Commerce and Magento. The...

SQL Injection Vulnerability in B2C_UQ Cloud Business System (CNVD-2019-18481)

UQ Cloud Business System B2C version is a compact e-commerce system, the platform is developed by PHP7.0+Mysql. B2CUQ Cloud Business System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

CVE-2019-2712

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 11.2.0.3 and 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2712

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 11.2.0.3 and 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2659

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. The supported version that is affected is 11.2.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce...

CVE-2019-2659

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. The supported version that is affected is 11.2.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce...

CVE-2019-2712

CVE-2019-2712 affects Oracle Commerce Platform (Dynamo Application Framework) with affected versions 11.2.0.3 and 11.3.1. Multiple sources describe a vulnerability that allows an unauthenticated attacker, with network access over HTTP, to compromise the Oracle Commerce Platform. The exploit requi...

CVE-2019-2712

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. Supported versions that are affected are 11.2.0.3 and 11.3.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2659

Vulnerability in the Oracle Commerce Platform component of Oracle Commerce subcomponent: Dynamo Application Framework. The supported version that is affected is 11.2.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce...

Oracle Commerce Platform Component Access Control Error Vulnerability

Oracle Commerce is the United States Oracle Oracle company's set of e-business solutions. Commerce Platform is one of them to provide a multi-functional e-business platform components. An access control error vulnerability exists in the Oracle Commerce Platform component. An attacker could exploi...

Oracle Commerce Platform Component Access Control Error Vulnerability (CNVD-2019-40810)

Oracle Commerce is the United States Oracle Oracle company's set of e-business solutions. Commerce Platform is one of them to provide a multi-functional e-business platform components. An access control error vulnerability exists in the Oracle Commerce Platform component. An attacker could exploi...

Degrau Publicidade e Internet Plataforma de E-commerce SQL Injection Vulnerability

Degrau Publicidade e Internet Plataforma de E-commerce is an e-commerce platform system. A SQL injection vulnerability exists in the Busca.aspx.cs file in Degrau Publicidade e Internet Plataforma de E-commerce. A remote attacker could exploit this vulnerability to execute arbitrary SQL commands...

CVE-2018-3122

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Integrations. Supported versions that are affected are 6.0, 6.0.1 and 5.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-3122

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Integrations. Supported versions that are affected are 6.0, 6.0.1 and 5.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

Design/Logic Flaw

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Integrations. Supported versions that are affected are 6.0, 6.0.1 and 5.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-3122

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Integrations. Supported versions that are affected are 6.0, 6.0.1 and 5.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...