CVE-2018-3122

Oracle Retail Open Commerce Platform (subcomponent: Integrations) within Oracle Retail Applications is affected on versions 6.0, 6.0.1 and 5.3. The vulnerability allows a low privileged, network-accessible attacker over HTTP to potentially perform unauthorized create, delete, or modify operations...

CVE-2018-3122

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Integrations. Supported versions that are affected are 6.0, 6.0.1 and 5.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...

Magento MarketPlace T1 - Bypass & Persistent Vulnerability

Document Title: =============== Magento MarketPlace T1 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1902 Release Date: ============= 2018-06-17 Vulnerability Laboratory ID VL-ID: ====================================...

UQcms_1.3.2_20180309 XSS Vulnerability in Seller Center

B2B2C multi-trader e-commerce system is a combination of many years of e-commerce development experience to launch B2B2C multi-store system, is currently one of the best e-commerce platforms in China, the system is designed as a "platform for self-supporting + suppliers stationed in the" e-commer...

iwebshop open source mall system 5.1 temporary trial version of the existence of file upload vulnerability

iWebShop is an open source WEB e-commerce B2B2C platform self-supporting + merchants stationed station-building system based on PHP language + MYSQL database development, using the MVC architecture Yii framework thinking design pattern carefully designed a product. iwebshop open source mall syste...

CVE-2014-9758

CVE-2014-9758 is a cross-site scripting (XSS) vulnerability in Magento E-Commerce Platform 1.9.0.1. Affected component: Magento 1.9.0.1 web application. Root cause: XSS in the platform. Impact per sources: Confidentiality LOW, Integrity LOW, Availability NONE (CVSS3.1); Attack vector NETWORK, Use...

CVE-2017-10173

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Website. Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

Buffer overflow

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Website. Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

Buffer overflow

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Framework. Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2017-10172

The CVE affects Oracle Retail Open Commerce Platform (Framework subcomponent) across versions 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. An unauthenticated attacker with network access via HTTP can compromise the platform and may update, insert, delete, or read data due to a defined vulnerabili...

CVE-2017-10173

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Website. Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2017-10172

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Framework. Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2017-10173

CVE-2017-10173 affects the Oracle Retail Open Commerce Platform (Website subcomponent). Affected are Oracle Retail Applications versions 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. The vulnerability allows an unauthenticated attacker with network access over HTTP to potentially compromise the pl...

CVE-2017-10172

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Framework. Supported versions that are affected are 5.0, 5.1, 5.2, 5.3, 6.0, 6.1, 15.0 and 15.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

Oracle Retail Open Commerce Platform Remote Vulnerability (CNVD-2017-27233)

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation, of which Oracle Retail Open Commerce Platform is an e-commerce solution component. A security vulnerability exists in the Website subcomponent of the Retail Open Commerce Platform component of Orac...

CVE-2017-3451

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Web. Supported versions that are affected are 4.0, 5.0, 5.1, 5.3, 6.0,6.1, 15.0 and 16.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2017-3451

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Web. Supported versions that are affected are 4.0, 5.0, 5.1, 5.3, 6.0,6.1, 15.0 and 16.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2017-3451

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Web. Supported versions that are affected are 4.0, 5.0, 5.1, 5.3, 6.0,6.1, 15.0 and 16.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2017-3451

CVE-2017-3451 affects Oracle Retail Open Commerce Platform Web subcomponent. Affected are Oracle Retail Open Commerce Platform versions 4.0, 5.0, 5.1, 5.3, 6.0, 6.1, 15.0, and 16.0. The vulnerability allows a low-privileged attacker who can reach the system over HTTP to compromise the platform, w...

CVE-2017-3451

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Web. Supported versions that are affected are 4.0, 5.0, 5.1, 5.3, 6.0,6.1, 15.0 and 16.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP ...