commerceltd.gr XSS vulnerability

Open Bug Bounty ID: OBB-489577 Description| Value ---|--- Affected Website:| commerceltd.gr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure base...

Magento Commerce - SSRF & XSPA Web Vulnerability

Document Title: =============== Magento Commerce - SSRF & XSPA Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1631 Release Date: ============= 2018-01-03 Vulnerability Laboratory ID VL-ID: ==================================== 1631 Comm...

Joomla! JEXTN Membership 3.1.0 SQL Injection

Title: Joomla! JEXTN Membership 3.1.0 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.jextn.com URL: https://extensions.joomla.org/extensions/extension/e-commerce/membership-a-subscriptions/jextn-membership/ Product: 'Joomla! JEXTN Membership 3.1.0' Developer: jextn.com Last updated: Ja...

Joomla Jtag Minicart 4.1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Joomla Jtag Minicart 4.1.0 - SQL injection Credit: Bilal KARDADOU Vendor: https://joomlatag.com URL: https://extensions.joomla.org/extensions/extension/e-commerce/shopping-cart/jtag-minicart/ Product: 'Joomla Jtag Minicart 4.1.0'...

Joomla Jtag Minicart 4.1.0 SQL Injection

Title: Joomla Jtag Minicart 4.1.0 - SQL injection Credit: Bilal KARDADOU Vendor: https://joomlatag.com URL: https://extensions.joomla.org/extensions/extension/e-commerce/shopping-cart/jtag-minicart/ Product: 'Joomla Jtag Minicart 4.1.0' Developer: JoomlaTag Last updated: Jun 06 2016 Compatibility...

Skyrocketing Bitcoin Fees Hit Carders in Wallet

Critics of unregulated virtual currencies like Bitcoin have long argued that the core utility of these payment systems lies in facilitating illicit commerce, such as buying drugs or stolen credit cards and identities. But recent spikes in the price of Bitcoin -- and the fees associated with movin...

WordPress WP e-Commerce – Clockwork SMS plugin <=2.0.5 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability found by Elias Dimopoulos in WordPress WP e-Commerce – Clockwork SMS plugin versions =2.0.5. Solution Update the WordPress WP e-Commerce – Clockwork SMS plugin to the latest available version at least 2.4.2...

PHP Scripts Mall E-commerce MLM Software SQL Injection Vulnerability

PHP Scripts Mall E-commerce MLM Software is a PHP based e-commerce online marketing system from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall E-commerce MLM Software version 1.0. A remote attacker can inject SQL into the PHP Scripts Mall E-commerce MLM Software...

CVE-2017-17629

Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...

CVE-2017-17610

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

CVE-2017-17610

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

Sql injection

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

Sql injection

Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...

CVE-2017-17629

Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...

CVE-2017-17610

The CVE-2017-17610 entry affects E-commerce MLM Software 1.0 . The vulnerability is a SQL Injection in multiple PHP pages: service_detail.php (pid parameter), event_detail.php (eventid parameter), and news_detail.php (newid parameter). Root cause: unsafely concatenated/unsanitized input enabling ...

CVE-2017-17629

CVE-2017-17629 affects Secure E-commerce Script 2.0.1 (PHP Scripts Mall). The vulnerability is an SQL Injection in category.php (parameters: searchmain, searchcat) and in single_detail.php (parameter: sid). This points to unsanitized user input leading to unauthorized data access and potential da...

CVE-2017-17610

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

SQL Injection Vulnerability in UQCMS Cloud Business B2B2C Multi-store System member.class.php Page

B2B2C multi-store system is a B2B2C e-commerce software with PHP+MYSQL program and smarty template. A SQL injection vulnerability exists in the member.class.php page of the UQCMS Cloud Business B2B2C Multi-Store System. The vulnerability stems from the program not adequately filtering user-suppli...

Secure E-commerce Script 2.0.1 SQL Injection

Exploit Title: Secure E-commerce Script 2.0.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version: 2.0.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Explo...

E-commerce MLM Software 1.0 SQL Injection

Exploit Title: E-commerce MLM Software 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/e-commerce-mlm/ Demo: http://74.124.215.220/advaemlm/ Version: 1.0 Category: Webapps Tested on:...