Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital Ant E-Commerce Software allows Stored XSS.This issue affects E-Commerce Software: before 11...

CVE-2023-3653 Stored XSS in Digital Ant E-Commerce Software

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital Ant E-Commerce Software allows Stored XSS. This issue affects E-Commerce Software: before 11...

CVE-2023-3653 Stored XSS in Digital Ant E-Commerce Software

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital Ant E-Commerce Software allows Stored XSS. This issue affects E-Commerce Software: before 11...

CVE-2023-3653

CVE-2023-3653 is a Stored XSS in Digital Ant E-Commerce Software (versions before 11). The vulnerability arises from improper neutralization of input during web page generation. Impact is limited to web page content and could allow injection of malicious scripts when user-supplied data is reflect...

CVE-2023-3652 Reflected XSS in Digital Ant E-Commerce Software

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital Ant E-Commerce Software allows Reflected XSS. This issue affects E-Commerce Software: before 11...

CVE-2023-3652

CVE-2023-3652 is a Reflected XSS in Digital Ant E-Commerce Software, affecting versions before 11. Root cause: improper input neutralization during web page generation. Impact per sources: potential for reflected scripts with low confidentiality/integrity impact, CVSS 3.1 base score 6.1 (MEDIUM);...

CVE-2023-3652 Reflected XSS in Digital Ant E-Commerce Software

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital Ant E-Commerce Software allows Reflected XSS. This issue affects E-Commerce Software: before 11...

CVE-2023-3651

CVE-2023-3651 affects Digital Ant E-Commerce Software prior to version 11. Root cause: improper neutralization of special elements in SQL commands, enabling SQL injection. Impacted component: the e-commerce software’s SQL handling. Documents indicate versions before 11 are vulnerable; CVSS metric...

CVE-2023-3651 SQLi in Digital Ant E-Commerce Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Digital Ant E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: before 11...

CVE-2023-3651 SQLi in Digital Ant E-Commerce Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Digital Ant E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: before 11...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address multiple vulnerabilities in Adobe software. An attacker can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessary...

CVE-2023-3898

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mAyaNet E-Commerce Software allows SQL Injection.This issue affects E-Commerce Software: before 1.1...

CVE-2023-3898

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mAyaNet E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: before 1.1...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mAyaNet E-Commerce Software allows SQL Injection.This issue affects E-Commerce Software: before 1.1...

CVE-2023-3898

CVE-2023-3898 is a SQL injection vulnerability in mAyaNet E-Commerce Software prior to version 1.1. The issue arises from improper neutralization of special elements used in SQL commands against the E-Commerce Software, enabling unauthorized SQL code execution that can affect data confidentiality...

CVE-2023-3898 SQLi in mAyaNets E-Commerce Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mAyaNet E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: before 1.1...

CVE-2023-3898 SQLi in mAyaNets E-Commerce Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mAyaNet E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: before 1.1...

CVE-2023-39439

SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase...

CVE-2023-39439

SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase...

CVE-2023-37486

Under certain conditions SAP Commerce OCC API - versions HYCOM 2105, HYCOM 2205, COMCLOUD 2211, endpoints allow an attacker to access information which would otherwise be restricted. On successful exploitation there could be a high impact on confidentiality with no impact on integrity and...