3468 matches found
PrestaShop warns of vulnerability: Update your stores now!
A vulnerability affecting open source e-commerce platform PrestaShop could spell trouble for servers running PrestaShop websites. The 15-year-old organisations platform is currently used by around 300,000 shops worldwide. The exploit is very dependent on specific versions in use, so one PrestaSho...
Hackers Exploit PrestaShop Zero-Day to Steal Payment Data from Online Stores
Malicious actors are exploiting a previously unknown security flaw in the open source PrestaShop e-commerce platform to inject malicious skimmer code designed to swipe sensitive information. "Attackers have found a way to use a security vulnerability to carry out arbitrary code execution in serve...
Magecart Serves Up Card Skimmers on Restaurant-Ordering Systems
Magecart campaigns have been skimming payment-card credentials of unsuspecting customers using three online restaurant-ordering systems, affecting about 300 restaurants that use the services and compromising tens of thousands of cards so far, researchers have found. Two separate ongoing Magecart...
Unspecified Vulnerability in Oracle Commerce
Oracle Commerce is the United States Oracle Oracle company's set of e-business solutions. Commerce Platform is one of them to provide a multi-functional e-business platform components. Oracle Commerce has a security vulnerability that can be exploited by an attacker to cause unauthorized access t...
Prestashop SQL Injection Vulnerability (CNVD-2022-58389)
Prestashop is a set of open source e-commerce solutions from the United States Prestashop. The solution provides a variety of payment methods , short message alerts and product image scaling and other features . Prestashop suffers from a SQL injection vulnerability that originates from the...
Shopware Cross-Site Scripting Vulnerability (CNVD-2022-58390)
Shopware is a German Shopware company's open source e-commerce software. A cross-site scripting vulnerability exists in Shopware versions prior to 5.7.12, which stems from a lack of checksum filtering of user-supplied and output data during login authentication. An attacker can exploit this...
CVE-2022-31057
Shopware is an open source e-commerce software made in Germany. Versions of Shopware 5 prior to version 5.7.12 are subject to an authenticated Stored XSS in Administration. Users are advised to upgrade. There are no known workarounds for this issue...
Cross site scripting
Shopware is an open source e-commerce software made in Germany. Versions of Shopware 5 prior to version 5.7.12 are subject to an authenticated Stored XSS in Administration. Users are advised to upgrade. There are no known workarounds for this issue...
CVE-2022-31057 Authenticated Stored XSS in Shopware Administration
Shopware is an open source e-commerce software made in Germany. Versions of Shopware 5 prior to version 5.7.12 are subject to an authenticated Stored XSS in Administration. Users are advised to upgrade. There are no known workarounds for this issue...
CVE-2022-31057 Authenticated Stored XSS in Shopware Administration
Shopware is an open source e-commerce software made in Germany. Versions of Shopware 5 prior to version 5.7.12 are subject to an authenticated Stored XSS in Administration. Users are advised to upgrade. There are no known workarounds for this issue...
CVE-2022-31057
CVE-2022-31057 affects Shopware 5.x prior to 5.7.12, with an authenticated Stored XSS in Administration. The vulnerability originates from insufficient input/output filtering in the Admin context, enabling stored script execution. Remediation per multiple sources is to upgrade to Shopware 5.7.12 ...
Newly Discovered Magecart Infrastructure Reveals the Scale of Ongoing Campaign
A newly discovered Magecart skimming campaign has its roots in a previous attack activity going all the way back to November 2021. To that end, it has come to light that two malware domains identified as hosting credit card skimmer code — "scanalytic.org" and "js.staticounter.net" — are part of a...
Lógico y Creativo SQL Injection Vulnerability
Lógico y Creativo is an e-commerce service from Lógico y Creativo Argentina. version 1.0 of Lógico y Creativo is vulnerable to SQL injection, which can be exploited by attackers to manipulate parameter ids to cause sql injection problems...
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar Cross-Site Scripting Vulnerability
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar is an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to a cross-site scripting vulnerability that stems from The ctgname parameter on the adminaddcata.php page lacks a checksum filter for...
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar SQL Injection Vulnerability
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to SQL injection, which stems from The keyword parameter of the searchproduct.php page lacks validation for external input SQL statements. An...
Brandbugle SQL注入漏洞
Brandbugle is an e-commerce application from Brandbugle India. Brandbugle is vulnerable to SQL injection, which can be exploited by attackers to cause sql injection issues via /main.php...
BootCommerce v3.2.1 - Multiple Persistent Vulnerabilities
Document Title: =============== BootCommerce v3.2.1 - Multiple Persistent Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2279 Release Date: ============= 2022-06-06 Vulnerability Laboratory ID VL-ID: ====================================...
Microweber CMS 1.2.15 Account Takeover
Exploit Title: Microweber CMS 1.2.15 - Account Takeover Date: 2022-05-09 Exploit Author: Manojkumar J Vendor Homepage: https://github.com/microweber/microweber Software Link: https://github.com/microweber/microweber/releases/tag/v1.2.15 Version: =1.2.15 Tested on: Windows10 CVE : CVE-2022-1631...
Microweber CMS 1.2.15 - Account Takeover Vulnerability
Exploit Title: Microweber CMS 1.2.15 - Account Takeover Exploit Author: Manojkumar J Vendor Homepage: https://github.com/microweber/microweber Software Link: https://github.com/microweber/microweber/releases/tag/v1.2.15 Version: =1.2.15 Tested on: Windows10 CVE : CVE-2022-1631 Description:...