Secure E-commerce Script 2.0.1 - 'searchcat' / 'searchmain' SQL Injection

Exploit Title: Secure E-commerce Script 2.0.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version: 2.0.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Explo...

Secure E-commerce Script 2.0.1 - searchcat / searchmain SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Secure E-commerce Script 2.0.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version: 2.0.1 Category:...

Secure E-commerce Script 2.0.1 - searchcat searchmain SQL Injection

Secure E-commerce Script 2.0.1 - searchcat searchmain SQL Injection Exploit Title: Secure E-commerce Script 2.0.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version:...

E-commerce MLM Software 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: E-commerce MLM Software 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/e-commerce-mlm/ Demo: http://74.124.215.220/advaemlm/...

E-commerce MLM Software 1.0 - SQL Injection

Exploit Title: E-commerce MLM Software 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/e-commerce-mlm/ Demo: http://74.124.215.220/advaemlm/ Version: 1.0 Category: Webapps Tested on:...

E-commerce MLM Software 1.0 - SQL Injection

E-commerce MLM Software 1.0 - SQL Injection Exploit Title: E-commerce MLM Software 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/e-commerce-mlm/ Demo: http://74.124.215.220/advaemlm/ Version: 1...

PayPal Subsidiary Data Breach Hits Up to 1.6 Million Customers

Global e-commerce business PayPal has disclosed a data breach that may have compromised personally identifiable information for roughly 1.6 million customers at a payment processing company PayPal acquired earlier this year. PayPal Holdings Inc. said Friday that a review of its recently acquired...

CVE-2017-1484

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user personal data. IBM X-Force ID: 128622...

Design/Logic Flaw

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user personal data. IBM X-Force ID: 128622...

CVE-2017-1484

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user personal data. IBM X-Force ID: 128622...

CVE-2017-1484

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user personal data. IBM X-Force ID: 128622...

CVE-2017-1484

CVE-2017-1484 affects IBM WebSphere Commerce Enterprise, Professional, Express, and Developer versions 7.0 and 8.0. The known issue allows an authenticated attacker to obtain information such as user personal data, constituting an information-disclosure vulnerability. The provided documents state...

Feds Seize Over 20,500 Domain Names For Selling Counterfeit Products

In a coordinated International cyber operation, law enforcement agencies have seized over 20,520 website domains for illegally selling counterfeit products, including luxury products, sportswear, electronics, pharmaceuticals and online piracy on e-commerce platforms and social networks...

IBM WebSphere Commerce Information Disclosure Vulnerability (CNVD-2017-37836)

IBM WebSphere Commerce is a suite of e-business solutions from IBM in the United States. The solution supports all sales business models, including B2C, B2B and B2B2C, on a single customer interaction platform. An information disclosure vulnerability exists in IBM WebSphere Commerce. A remote...

What to expect for this year's Black Friday and Cyber Monday

Last year during holidays, US online sales surpassed $122 billion. This represented a 12 percent increase over the previous year. But beyond the overall growth, what's more interesting is that sales at physical stores dropped by 10 percent, the result of ongoing consumer comfort with and adoption...

What to expect for this year's Black Friday and Cyber Monday

Last year during holidays, US online sales surpassed $122 billion. This represented a 12 percent increase over the previous year. But beyond the overall growth, what's more interesting is that sales at physical stores dropped by 10 percent, the result of ongoing consumer comfort with and adoption...

SQL injection vulnerability in article.class.php page of UQCMS cloud commerce system

UQCMS cloud business system is a B2B2C e-commerce software with the program using PHP+MYSQL and the template using smarty template. UQCMS cloud business system article.class.php page SQL injection vulnerability, the vulnerability stems from the program does not adequately filter the input submitt...

Singles’ Day deal seekers beware

Originally a day set aside for singles in China to be proud of their singlehood, Singles' Day has been transformed into what is arguably the world’s single largest e-commerce festival, thanks to the involvement of The Alibaba Group. In fact, the Alibaba Group alone reported $17.8 billion in sales...

SQL Injection Vulnerability in Royal 100 E-commerce System

Shenzhen Royal Network Technology Co., Ltd. provides e-commerce enterprises and e-commerce logistics enterprises with enterprise-level e-commerce logistics system and supply chain consulting, design, development and technical operation and maintenance support services. A SQL injection vulnerabili...

Spree Improper Input Validation vulnerability

Spree Commerce 1.0.x before 2.0.0.rc1 allows remote authenticated administrators to instantiate arbitrary Ruby objects and execute arbitrary commands via the 1 paymentmethod parameter to core/app/controllers/spree/admin/paymentmethodscontroller.rb; and the 2 promotionaction parameter to...