SQL Injection Vulnerability in B2C_UQ Cloud Business System (CNVD-2019-18481)

UQ Cloud Business System B2C version is a compact e-commerce system, the platform is developed by PHP7.0+Mysql. B2CUQ Cloud Business System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Degrau Publicidade e Internet Plataforma de E-commerce SQL Injection Vulnerability

Degrau Publicidade e Internet Plataforma de E-commerce is an e-commerce platform system. A SQL injection vulnerability exists in the Busca.aspx.cs file in Degrau Publicidade e Internet Plataforma de E-commerce. A remote attacker could exploit this vulnerability to execute arbitrary SQL commands...

Magento MarketPlace T1 - Bypass & Persistent Vulnerability

Document Title: =============== Magento MarketPlace T1 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1902 Release Date: ============= 2018-06-17 Vulnerability Laboratory ID VL-ID: ====================================...

UQcms_1.3.2_20180309 XSS Vulnerability in Seller Center

B2B2C multi-trader e-commerce system is a combination of many years of e-commerce development experience to launch B2B2C multi-store system, is currently one of the best e-commerce platforms in China, the system is designed as a "platform for self-supporting + suppliers stationed in the" e-commer...

iwebshop open source mall system 5.1 temporary trial version of the existence of file upload vulnerability

iWebShop is an open source WEB e-commerce B2B2C platform self-supporting + merchants stationed station-building system based on PHP language + MYSQL database development, using the MVC architecture Yii framework thinking design pattern carefully designed a product. iwebshop open source mall syste...

CVE-2014-9758

CVE-2014-9758 is a cross-site scripting (XSS) vulnerability in Magento E-Commerce Platform 1.9.0.1. Affected component: Magento 1.9.0.1 web application. Root cause: XSS in the platform. Impact per sources: Confidentiality LOW, Integrity LOW, Availability NONE (CVSS3.1); Attack vector NETWORK, Use...

EC-CUBE Server-Side Request Forgery Vulnerability

LOCKON EC-CUBE is an open source e-commerce website building platform developed by LOCKON Co. The platform supports product login, user evaluation, artwork layout and so on. A server-side request forgery vulnerability exists in EC-CUBE version 2.12.6en-p1, which can be exploited by remote attacke...

E-commerce platform of Beijing 3D World Technology Co., Ltd. suffers from java deserialization vulnerability

Ltd. is a professional software and application service provider of domestic inspection and testing management platform, master data management platform, e-commerce platform and so on. A java deserialization vulnerability exists in the e-commerce platform of Beijing 3D World Technology Co., Ltd...

Researchers Outline Bugs in Yahoo, PayPal, Magento

Researchers recently discovered a smattering of vulnerabilities in web applications and mobile applications belonging to companies like Yahoo, PayPal, Magento, and Shopify that could have led to account theft, session hijacking, and phishing, among other consequences. Hadji Samir, Ebrahim Hegazy,...

Multiple SQL Injection Vulnerabilities in ZeusCart

ZeusCart is an open source PHP and Mysql based e-commerce platform. ZeusCart has multiple SQL injection vulnerabilities that can be exploited by remote attackers to execute arbitrary SQL commands...

Microsoft Commerce Server Installed

Microsoft Commerce Server, an e-commerce platform running on .NET, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58650; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

SQL Injection Vulnerability in Batavi 1.1.2

Information -------------------- Name : SQL Injection Vulnerability in Batavi Software : Batavi 1.1.2 and possibly below. Vendor Homepage : http://www.batavi.org Vulnerability Type : SQL Injection Severity : Critical Researcher : Onur Y?lmaz Advisory Reference : NS-12-003 Description...

Batavi 1.1.2 SQL Injection

Information -------------------- Name : SQL Injection Vulnerability in Batavi Software : Batavi 1.1.2 and possibly below. Vendor Homepage : http://www.batavi.org Vulnerability Type : SQL Injection Severity : Critical Researcher : Onur Yılmaz Advisory Reference : NS-12-003 Description...

BluePay Manager v2.0 Script Insertion Vulnerability

BluePay Manager v2.0 Script Insertion Vulnerability Vuln. discovered by : r0t Date: 18 april 2006 vendor:bluepay.com affected versions:v2.0 and previous orginal advisory: http://pridels.blogspot.com/2006/04/bluepay-manager-v20-script-insertion.html Vuln. description: Input passed to the "Account...