SQL Injection Vulnerability in Dascommerce Multi-User Mall System 2.0 Home Page

Large business creation multi-user mall system is mainly oriented to the high-end enterprise-level users, to create self-operated + investment in the e-commerce platform similar to the diversified business model of Jingdong, Tmall, the group purchase, e-commerce retail, wholesale in one, to help...

SQL Injection Vulnerability in Tesco Mall System

Tesco mall system for the majority of small and medium-sized enterprises to develop a professional-level e-commerce mall platform system. Ease2Shop Mall system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Smartstore SmartStoreNET Cross-Site Request Forgery Vulnerability

Smartstore SmartStoreNET is an open source e-commerce Web platform of Germany Smartstore company . The platform includes CRM, CMS, sales, marketing, payment, order processing and other functions. A cross-site request forgery vulnerability exists in Smartstore SmartStoreNET versions prior to 4.1.0...

PrestaShop CSV Injection Vulnerability

PrestaShop is a full-featured, cross-platform, free and open source e-commerce solution designed for web 2.0. A CSV injection vulnerability exists in PrestaShop versions prior to 1.7.2. An attacker can exploit this vulnerability by using the store search keyword in the admin panel to conduct a CS...

CVE-2021-21308

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout system is not complete and an attacker is able to foreign request and executes customer commands. The problem is fixed in 1.7.7.2...

CVE-2021-21308

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout system is not complete and an attacker is able to foreign request and executes customer commands. The problem is fixed in 1.7.7.2...

CVE-2021-21302

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Injection vulnerability possible by using shop search keywords via the admin panel. The problem is fixed in 1.7.7.2...

Input validation

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Injection vulnerability possible by using shop search keywords via the admin panel. The problem is fixed in 1.7.7.2...

Design/Logic Flaw

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout system is not complete and an attacker is able to foreign request and executes customer commands. The problem is fixed in 1.7.7.2...

CVE-2021-21308

CVE-2021-21308 affects PrestaShop prior to 1.7.2, where the soft logout mechanism is incomplete, enabling an attacker to forge a request and execute customer commands. The issue is documented as fixed in version 1.7.7.2. The CVSS metrics indicate a network-based, low-complexity exposure with vary...

CVE-2021-21302

PrestaShopBefore 1.7.2 is affected by a CSV injection vulnerability that can be triggered by crafting shop search keywords in the admin panel. The underlying issue is addressed in version 1.7.7.2. Affected product: PrestaShop (web e‑commerce platform); vulnerable component: admin search handling ...

File Deletion Vulnerability in Bacardi CMS Microstore

Bacardi CMS MicroMall is a content management system CMS for e-commerce. A directory traversal vulnerability exists in Baike CMS Microstore, which can be exploited by an attacker to traverse a deleted directory...

E-commerce under Brute-Force attacks: how Wallarm stops it

Most of the Wallarm e-commerce customers are running WAF protection with Brute-Force attacks protection functionality The post E-commerce under Brute-Force attacks: how Wallarm stops it appeared first on Wallarm...

Advisto PEEL SHOPPING Cross-Site Scripting Vulnerability

Advisto PEEL SHOPPING is an open source e-commerce system based on PHP and MySQL. A cross-site scripting vulnerability exists in Advisto PEEL SHOPPING, which arises from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute...

SAP Commerce Critical Security Bug Allows RCE

SAP is warning of a critical vulnerability in its SAP Commerce platform for e-commerce businesses. If exploited, the flaw could allow for remote code execution RCE that ultimately could compromise or disrupt the application. SAP Commerce organizes data – such as product information – to be...

Adobe Magento SQL Injection Vulnerability

Adobe Magento is Adobe's one with PHP written in open source e-commerce platform.Magento Community Edition is the community edition, later renamed Magento Open Source, Magento Enterprise Edition is the enterprise edition, later renamed Magento Magento Enterprise Edition is the enterprise edition,...

Adobe Magento Cross-Site Scripting Vulnerability (CNVD-2021-13917)

Adobe Magento is Adobe's one with PHP written in open source e-commerce platform.Magento Community Edition is the community edition, later renamed Magento Open Source, Magento Enterprise Edition is the enterprise edition, later renamed Magento Magento Enterprise Edition is the enterprise edition,...

Adobe Magento File Upload Limit Bypass Vulnerability

Adobe Magento is Adobe's one with PHP written in open source e-commerce platform.Magento Community Edition is the community edition, later renamed Magento Open Source, Magento Enterprise Edition is the enterprise edition, later renamed Magento Magento Enterprise Edition is the enterprise edition,...

Adobe Magento Cross-Site Scripting Vulnerability (CNVD-2021-13923)

Adobe Magento is Adobe's one with PHP written in open source e-commerce platform.Magento Community Edition is the community edition, later renamed Magento Open Source, Magento Enterprise Edition is the enterprise edition, later renamed Magento Magento Enterprise Edition is the enterprise edition,...

Adobe Magento Command Injection Vulnerability

Adobe Magento is Adobe's one with PHP written in open source e-commerce platform.Magento Community Edition is the community edition, later renamed Magento Open Source, Magento Enterprise Edition is the enterprise edition, later renamed Magento Magento Enterprise Edition is the enterprise edition,...