3481 matches found
CVE-2021-39475
CVE-2021-39475 XSS on admin reviews page https://www.warcloudsecurity.com/ecommerce/admin/reviews.php?action=preview&rID=1&page=0...
oss-oopssec-store
OSS - OopsSec Store Security training for the apps you actually ship. 36 challenges across web, API, authentication, business logic, cryptography, supply chain, AI agents and MCP. Break a deliberately vulnerable e-commerce app built on Next.js, React, TypeScript and Prisma. Find the bugs. Exploit...
CVE-2025-7461
CVE-2025-7461: SQL Injection Vulnerability Analysis in Modern Bag E-commerce System ๐ Language / ่ฏญ่จ : English | ็ฎไฝไธญๆ Vulnerability Overview Vulnerability Database: https://vuldb.com/?id.316112 Project Source: https://code-projects.org/modern-bag-in-php-css-javascript-and-mysql-free-download/ Item...
ricerca-tesi
thesis-research research resources for cve-2026-7228 Tools VirtualBox installation VirtualBox installation: https://www.virtualbox.org/wiki/Downloads Windows 11 ISO installation https://www.microsoft.com/it-it/software-download/windows11 Linux distro installation: lubuntu...
ReadyScript e-commerce management system Session Management
The vulnerability of the ReadyScript e-commerce management system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
ReadyScript e-commerce management system File Upload
The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...
ReadyScript e-commerce management system Sequence Data Compromise
The vulnerability of the ReadyScript e-commerce management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...
ReadyScript e-commerce management system File Upload
The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...
CVE-2022-4140
CVE-2022-4140 - WordPress plugin Welcart e-Commerce 2.8.5 - Arbitrary File Read This repo contains a Proof of ConceptPoC exploit for CVE-2022-4140. Disclaimer This project is provided for educational purposes and authorized security testing only. Do not use it against systems that you do not own ...
CVE-2025-61454
๐ก๏ธ CVE Disclosure: CVE-2025-61454 โ Reflected XSS in E-commerce Project Disclosure Date: 14 October 2025 CVE ID: CVE-2025-61454 Severity: MEDIUM CVSS 6.1 ๐งฉ Summary A reflected Cross-Site Scripting XSS vulnerability exists in the E-commerce Project v1.0, specifically within the search.php endpoint...
CVE-2025-61455
๐ก๏ธ CVE Disclosure: CVE-2025-61455 โ SQL Injection in E-commerce Project Disclosure Date: 14 October 2025 CVE ID: CVE-2025-61455 Severity: CRITICAL CVSS 9.8 ๐งฉ Summary A critical SQL Injection vulnerability exists in E-commerce Project v1.0, specifically within the signup.inc.php endpoint. The...
CVE-2025-61456
๐ก๏ธ CVE Disclosure: CVE-2025-61456 โ Reflected XSS in E-commerce Project Disclosure Date: 14 October 2025 CVE ID: CVE-2025-61456 Severity: MEDIUM CVSS 6.1 ๐งฉ Summary A reflected Cross-Site Scripting XSS vulnerability exists in the E-commerce Project v1.0, specifically within the index.php endpoint...
CVE-2013-3651
CVE-2013-3651 PoC - EC-CUBE 2 Usage Requirements Python 3 Execution $ python poccve20133651.py - e.g. $ python poccve20133651.py http://127.0.0.1:9000/ Result: Vulnerable! PoC Vulnerability | EC-CUBE, an open platform for building and renewing e-commerce sites...
CVE-2025-29722
๐ก๏ธ CVE-2025-29722 โ Cross Site Request Forgery CSRF in Commercify v1.0 Discovered by: David P.S Abraham aka Davycipher CVE ID CVE-2025-29722 has been assigned to this vulnerability by MITRE Corporation. Summary A CSRF vulnerability was identified in Commercify v1.0 , an open-source e-commerce...
CVE-2026-111835 WordPress BjornTech Swish for WooCommerce plugin <= 3.7.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in bjorntech BjornTech Swish for WooCommerce woo-swish-e-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BjornTech Swish for WooCommerce: from n/a through 3.7.8...
CVE-2026-111835
The BjornTech Swish for WooCommerce WordPress plugin (versions
CVE-2026-111835 WordPress BjornTech Swish for WooCommerce plugin <= 3.7.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in bjorntech BjornTech Swish for WooCommerce woo-swish-e-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BjornTech Swish for WooCommerce: from n/a through 3.7.8...
Gosoft Proticaret E-Commerce 4.05 Cross Site Request Forgery
Gosoft Software Proticaret E-Commerce versions before 6.0 contain a cross site request forgery vulnerability. The vendor fix remains in progress for version 4.05...
CVE-2026-18205
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Reflected XSS. This issue affects Ticimax E-Commerce Platform: through 2026-09-02...
EUVD-2026-104962
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Reflected XSS. This issue affects Ticimax E-Commerce Platform: through 2026-09-02...