3478 matches found
TYPO3 Aimeos shop and e-commerce framework cross-site scripting vulnerability
TYPO3 is a free and open source content management system. TYPO3 Aimeos shop and e-commerce framework suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code...
CVE-2021-28126
index.jsp in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a Stored cross-site scripting XSS vulnerability...
CVE-2021-28110
/exec in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a vulnerability in its XML parser...
CVE-2021-28110
/exec in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a vulnerability in its XML parser...
CVE-2021-28126
index.jsp in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a Stored cross-site scripting XSS vulnerability...
CVE-2021-28126
index.jsp in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a Stored cross-site scripting XSS vulnerability...
Code injection
/exec in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a vulnerability in its XML parser...
CVE-2021-28110
/exec in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a vulnerability in its XML parser...
Cross site scripting
index.jsp in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a Stored cross-site scripting XSS vulnerability...
CVE-2021-28126
index.jsp in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a Stored cross-site scripting XSS vulnerability...
CVE-2021-28126
The CVE-2021-28126 entry concerns TranzWare e-Commerce Payment Gateway (TWEC PG) prior to version 3.1.27.5, where index.jsp contains a stored XSS vulnerability. This is documented across multiple connected records (Red Hat, NVD, CVE lists, and regional advisories) and is specific to the TWEC PG’s...
CVE-2021-28110
/exec in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a vulnerability in its XML parser...
CVE-2021-28110
CVE-2021-28110 affects TranzWare e-Commerce Payment Gateway (TWEC PG) prior to version 3.1.27.5, due to a vulnerability in its XML parser. The issue is described without exploitation details in the provided sources, with CVSSv3.1 base score 7.5 (Network attack, no privileges required, high availa...
PT-2021-17746
Name of the Vulnerable Software and Affected Versions: TranzWare e-Commerce Payment Gateway TWEC PG versions prior to 3.1.27.5 Description: The issue is related to a vulnerability in the XML parser of the /exec endpoint in TranzWare e-Commerce Payment Gateway TWEC PG. This vulnerability affects...
A3MALL e-commerce system open source version of unauthorized access vulnerability
A3MALL e-commerce system open source version is an open source free mall system. A3MALL e-commerce system open source version of unauthorized access vulnerability , attackers can use the vulnerability to obtain sensitive information...
CVE-2021-28110: Improper Restriction of XML External Entity Reference
/exec in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a vulnerability in its XML parser...
CVE-2021-28126: Improper Neutralization of Input During Web Page Generation
index.jsp in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a Stored cross-site scripting XSS vulnerability...
PT-2021-17759
Name of the Vulnerable Software and Affected Versions: TranzWare e-Commerce Payment Gateway TWEC PG versions prior to 3.1.27.5 Description: The issue is related to a Stored cross-site scripting XSS vulnerability in the index.jsp file. This vulnerability allows for the storage of malicious scripts...
OurPHP suffers from an arbitrary file deletion vulnerability (CNVD-2021-24983)
OurPHP is an enterprise e-commerce marketing website building system. OurPHP has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete any file under the server...