8852 matches found
CVE-2023-38221 Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could lead in arbitrary code execution by an admin-privileg...
CVE-2023-38221 Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could lead in arbitrary code execution by an admin-privileg...
CVE-2023-38221 Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could lead in arbitrary code execution by an admin-privileg...
Adobe Commerce 资源管理错误漏洞
Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A resource management error vulnerability exists in Adobe Commerce prior to version 2.4.7, which stems from being affected by an uncontrolled resource...
Adobe Commerce Code Issues Vulnerabilities
Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. A code issue vulnerability previously existed in Adobe Commerce version 2.4.7, which stems from being affected by a server-side request forgery SSRF vulnerability that could lead to arbitrary file...
Adobe Commerce 跨站脚本漏洞
Adobe Commerce is the United States of America Odobie Adobe company's a kind of merchants and brands for the world's leading digital commerce solutions. A cross-site scripting vulnerability exists in Adobe Commerce prior to version 2.4.7, which stems from the application's lack of effective...
Adobe Commerce Input Validation Error Vulnerability
Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. An input validation error vulnerability exists in Adobe Commerce prior to version 2.4.7, which stems from being affected by an incorrect input validation vulnerability that could allow an attacker...
Adobe Commerce SQL Injection Vulnerability
Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. A SQL injection vulnerability exists in Adobe Commerce prior to version 2.4.7, which stems from being affected by a SQL injection vulnerability that could allow an attacker authenticated with...
Adobe Commerce SQL Injection Vulnerability
Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. A SQL injection vulnerability exists in Adobe Commerce prior to version 2.4.7, which stems from being affected by a SQL injection vulnerability that could allow an attacker authenticated with...
Adobe Commerce 授权问题漏洞
Adobe Commerce is the United States of America Odobie Adobe company's a kind of merchants and brands for the world's leading digital commerce solutions. An authorization issue vulnerability previously existed in Adobe Commerce version 2.4.7, which stemmed from improper privilege management in the...
Adobe Commerce SQL注入漏洞
Adobe Commerce is the United States of America Odobie Adobe company's a kind of merchants and brands for the world's leading digital commerce solutions. A SQL injection vulnerability exists in Adobe Commerce prior to version 2.4.7, which stems from the application's lack of validation of external...
Adobe Commerce Security Breach
Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. A security vulnerability exists in Adobe Commerce prior to version 2.4.7, which is affected by an incorrect input validation vulnerability. An authenticated attacker could trigger an insecure direct...
CVE-2023-41858
Cross-Site Request Forgery CSRF vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...
CVE-2023-41858
Cross-Site Request Forgery CSRF vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...
CVE-2023-41858 WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...
CVE-2023-41858
CVE-2023-41858 is a CSRF vulnerability in the WordPress plugin Order Delivery Date for WP e-Commerce (versions <= 1.2). Root cause: CSRF allows unauthorized actions on behalf of an authenticated user. Impact per sources: high confidentiality, integrity, and availability impact (CVSS 3.1/3.1 ve...
APSB23-50 : Security update available for Adobe Commerce
Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution, privilege escalation, arbitrary file system read, security feature bypass and application...
WordPress Plugin Order Delivery Date for WP e-Commerce Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
Design/Logic Flaw
OroCommerce is an open-source Business to Business Commerce application. In versions 4.1.0 through 4.1.13, 4.2.0 through 4.2.10, 5.0.0 prior to 5.0.11, and 5.1.0 prior to 5.1.1, the JS payload added to the product name may be executed at the storefront when adding a note to the shopping list line...