CVE-2024-52462

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Reflected XSS.This issue affects WP e-Commerce Style Email: from n/a through = 0.6.2...

CVE-2024-52462 WordPress WP e-Commerce Style Email plugin <= 0.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Reflected XSS.This issue affects WP e-Commerce Style Email: from n/a through = 0.6.2...

CVE-2024-52462

CVE-2024-52462 : WordPress plugin WP e-Commerce Style Email (versions ≤ 0.6.2) contains a Reflected Cross‑Site Scripting (XSS) vulnerability due to improper input neutralization during web page generation. Affected software: WP e-Commerce Style Email. Root cause/impact: unauthenticated input can ...

CVE-2024-52462 WordPress WP e-Commerce Style Email plugin <= 0.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Reflected XSS.This issue affects WP e-Commerce Style Email: from n/a through = 0.6.2...

WordPress plugin WP e-Commerce Style Email 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Hakiduck Patchstack Alliance in WordPress Plugin Ni WooCommerce Cost Of Goods versions = 3.2.8...

The vulnerability of software platforms for developing and managing Adobe Commerce and Magento Open Source online stores lies in insufficient validation of requests on the server side. This allows attackers to execute SSRF attacks.

The vulnerability of software platforms for developing and managing Adobe Commerce and Magento Open Source online stores is related to insufficient testing of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...

Malicious code in node-commerce-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfa533cdd1af622e3c90101a8a4cdd292f00540f515f5e264c683a2984199538 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10910 Malicious code in node-commerce-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfa533cdd1af622e3c90101a8a4cdd292f00540f515f5e264c683a2984199538 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11663

A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The exploit has been disclose...

CVE-2024-11663 Codezips E-Commerce Site search.php sql injection

A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The exploit has been disclose...

CVE-2024-11663

Codezips E-Commerce Site 1.0 (search.php) is affected. The root cause is manipulation of the keywords argument, leading to an SQL injection vulnerability. The issue can be exploited remotely and has been publicly disclosed. Affected components: the search.php functionality; the vulnerability impa...

CVE-2024-11663 Codezips E-Commerce Site search.php sql injection

A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The exploit has been disclose...

E-Commerce Site 注入漏洞

E-Commerce Site is an open source e-commerce site by Codezips. An injection vulnerability exists in E-Commerce Site version 1.0, which stems from an incorrect manipulation of the parameter keywords that can lead to sql injection...

PT-2024-17173 · Unknown · Codezips E-Commerce Site

Name of the Vulnerable Software and Affected Versions: Codezips E-Commerce Site version 1.0 Description: A critical issue was found in the file search.php, where the manipulation of the keywords argument leads to sql injection. The attack can be launched remotely. The exploit has been disclosed t...

CVE-2024-7882

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection. This issue affects e-Commerce: before 22.11.2024...

CVE-2024-7882

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection. This issue affects e-Commerce: before 22.11.2024...

ALPINE-CVE-2024-7882

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection. This issue affects e-Commerce: before 22.11.2024...

CVE-2024-7882

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection.This issue affects e-Commerce: before 22.11.2024...

CVE-2024-7882

CVE-2024-7882 describes an SQL Injection in Special Minds Design and Software e-Commerce due to improper neutralization of special elements in SQL commands. Affected are versions prior to 22.11.2024. The linked documents state that validation/sanitization of inputs is needed and patching prior to...