CVE-2023-0998

A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file /alphaware/summary.php of the component Payment Handler. The manipulation of the argument amount leads to improper access controls. It is possib...

CVE-2023-0998

A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file /alphaware/summary.php of the component Payment Handler. The manipulation of the argument amount leads to improper access controls. It is possib...

CVE-2023-0997

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...

CVE-2023-0997

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...

Sql injection

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...

Improper access control

A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file /alphaware/summary.php of the component Payment Handler. The manipulation of the argument amount leads to improper access controls. It is possib...

CVE-2023-0998

CVE-2023-0998 affects SourceCodester Alphaware Simple E-Commerce System 1.0, specifically the Payment Handler component in /alphaware/summary.php. The root cause is manipulation of the amount argument leading to improper access controls, allowing remote abuse. Exploitation has been disclosed publ...

CVE-2023-0998 SourceCodester Alphaware Simple E-Commerce System Payment summary.php access control

A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file /alphaware/summary.php of the component Payment Handler. The manipulation of the argument amount leads to improper access controls. It is possib...

CVE-2023-0997 SourceCodester Moosikay E-Commerce System POST Parameter order.php sql injection

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...

CVE-2023-0997

CVE-2023-0997 affects SourceCodester Moosikay E-Commerce System 1.0. The vulnerability is in the POST Parameter Handler’s /Moosikay/order.php file, where manipulation of the username parameter leads to SQL injection. The issue can be exploited remotely, and public disclosures exist. Multiple conn...

Alphaware Simple E-Commerce System 访问控制错误漏洞

Alphaware Simple E-Commerce System is an e-commerce system by razormist individual developers. An Access Control Error vulnerability exists in SourceCodester Alphaware Simple E-Commerce System version 1.0, which stems from incorrect manipulation of the parameter amount resulting in incorrect acce...

Moosikay E-Commerce System SQL注入漏洞

Moosikay E-Commerce System is an e-commerce system by the individual developer Arvin Arandilla. A SQL injection vulnerability exists in SourceCodester Moosikay E-Commerce System version 1.0, which stems from an incorrect manipulation of the username parameter resulting in sql injection...

What is the tokenization process and why it is so important?

By Owais Sultan A large number of e-commerce payment platforms use effective payment gateway tools and effectively integrate them with an… This is a post from HackRead.com Read the original post: What is the tokenization process and why it is so important?...

Google Vertex AI Vision: Revolutionizing E-Commerce?

By Waqas Google Cloud released its newest AI feature for online retailers in 2023. Their shelf-checking AI solution, Vertex AI… This is a post from HackRead.com Read the original post: Google Vertex AI Vision: Revolutionizing E-Commerce?...

euro-commerce.co.rs Cross Site Scripting vulnerability OBB-3193988

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaaS Security Best Practices: Safeguard Consumer Data

By Owais Sultan In todays SaaS market, security is of utmost importance. Online commerce has undergone major changes over the past… This is a post from HackRead.com Read the original post: SaaS Security Best Practices: Safeguard Consumer Data...

GuLoader Malware Using Malicious NSIS Executables to Target E-Commerce Industry

E-commerce industries in South Korea and the U.S. are at the receiving end of an ongoing GuLoader malware campaign, cybersecurity firm Trellix disclosed late last month. The malspam activity is notable for transitioning away from malware-laced Microsoft Word documents to NSIS executable files for...

GuLoader Malware Using Malicious NSIS Executables to Target E-Commerce Industry

E-commerce industries in South Korea and the U.S. are at the receiving end of an ongoing GuLoader malware campaign, cybersecurity firm Trellix disclosed late last month. The malspam activity is notable for transitioning away from malware-laced Microsoft Word documents to NSIS executable files for...

Zhongbang CRMEB 安全漏洞

Zhongbang CRMEB is an open source e-commerce management system from Zhongbang Xi'an, China. A security vulnerability exists in CRMEB version 4.4.4, which is caused by an arbitrary file download...

CVE-2023-23617

OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code filter in certain conditions. Versions 19.4.22 and 20.0.19 have a fix for this issue. There are no known workarounds...