CVE-2023-3653

CVE-2023-3653 is a Stored XSS in Digital Ant E-Commerce Software (versions before 11). The vulnerability arises from improper neutralization of input during web page generation. Impact is limited to web page content and could allow injection of malicious scripts when user-supplied data is reflect...

CVE-2023-3652 Reflected XSS in Digital Ant E-Commerce Software

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital Ant E-Commerce Software allows Reflected XSS. This issue affects E-Commerce Software: before 11...

CVE-2023-3652

CVE-2023-3652 is a Reflected XSS in Digital Ant E-Commerce Software, affecting versions before 11. Root cause: improper input neutralization during web page generation. Impact per sources: potential for reflected scripts with low confidentiality/integrity impact, CVSS 3.1 base score 6.1 (MEDIUM);...

CVE-2023-3652 Reflected XSS in Digital Ant E-Commerce Software

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digital Ant E-Commerce Software allows Reflected XSS. This issue affects E-Commerce Software: before 11...

CVE-2023-3651

CVE-2023-3651 affects Digital Ant E-Commerce Software prior to version 11. Root cause: improper neutralization of special elements in SQL commands, enabling SQL injection. Impacted component: the e-commerce software’s SQL handling. Documents indicate versions before 11 are vulnerable; CVSS metric...

CVE-2023-3651 SQLi in Digital Ant E-Commerce Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Digital Ant E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: before 11...

CVE-2023-3651 SQLi in Digital Ant E-Commerce Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Digital Ant E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: before 11...

CVE-2023-3898

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mAyaNet E-Commerce Software allows SQL Injection.This issue affects E-Commerce Software: before 1.1...

CVE-2023-3898

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mAyaNet E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: before 1.1...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mAyaNet E-Commerce Software allows SQL Injection.This issue affects E-Commerce Software: before 1.1...

CVE-2023-3898 SQLi in mAyaNets E-Commerce Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mAyaNet E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: before 1.1...

CVE-2023-3898

CVE-2023-3898 is a SQL injection vulnerability in mAyaNet E-Commerce Software prior to version 1.1. The issue arises from improper neutralization of special elements used in SQL commands against the E-Commerce Software, enabling unauthorized SQL code execution that can affect data confidentiality...

CVE-2023-3898 SQLi in mAyaNets E-Commerce Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mAyaNet E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: before 1.1...

Digital Ant E-Commerce SQL Injection Vulnerability

Digital Ant E-Commerce is an e-commerce platform from Digital Ant, Inc. A SQL injection vulnerability exists in versions of Digital Ant E-Commerce Software prior to 11, which stems from incorrect neutralization of special elements used in SQL commands...

mAyaNet E-Commerce SQL Injection Vulnerability

mAyaNet E-Commerce is an e-commerce platform from mAyaNet, Inc. A SQL injection vulnerability exists in mAyaNet E-Commerce versions prior to 1.1, which stems from incorrect neutralization of special elements used in SQL commands...

PT-2023-25606

Name of the Vulnerable Software and Affected Versions Digital Ant E-Commerce Software versions prior to 11 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker c...

PT-2023-26716

Name of the Vulnerable Software and Affected Versions mAyaNet E-Commerce Software versions prior to 1.1 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

Digital Ant E-Commerce Cross-Site Scripting Vulnerability

Digital Ant E-Commerce is an e-commerce platform from Digital Ant, Inc. A cross-site scripting vulnerability exists in versions of Digital Ant E-Commerce Software prior to version 11, which arises from improperly neutralized input during web page generation...

Digital Ant E-Commerce Cross-Site Scripting Vulnerability

Digital Ant E-Commerce is an e-commerce platform from Digital Ant, Inc. A cross-site scripting vulnerability exists in versions of Digital Ant E-Commerce Software prior to version 11, which arises from improperly neutralized input during web page generation...

CVE-2023-39528

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, the displayAjaxEmailHTML method can be used to read any file on the server, potentially even outside of the project if the server is not correctly configured. Version 8.1.1 contains a patch for this issue. There are ...