DSMall open source multi-user mall system front-end command execution vulnerability

DSMall is an open source B2B2C e-commerce system created by Deshaun Networks. DSMall open source multi-user mall system in the foreground there is a command injection vulnerability . Attackers can use the vulnerability to obtain server privileges...

Apache OFBiz 16.11.05 - Cross-Site Scripting

Exploit Title: Apache OFBiz v16.11.05 - Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 09 - December - 2018 Exploit Author: DKM Vendor Homepage: https://ofbiz.apache.org/ Software Link: https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-16.11.05.zip Version: v16.11.05 Test...

WordPress Simple-E-Commerce-Shopping-Cart 2.2.5 Database Disclosure

Exploit Title : WordPress Simple-E-Commerce-Shopping-Cart Plugins 2.2.5 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : wordpress.org/plugins/simple-e-commerce-shopping-cart/ Owner of the Script : Niaz Showke...

Stored XSS Vulnerability in Cloud EC E-commerce System Version V1.2.1

Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system V1.2.1 version of the existence of stored XSS vulnerability, an attacker can exploit...

Magecart Credit Card Stealer

Magecart is a malicious javascript code injected into e-commerce websites in order to steal payment details. A compromised website containing the malicious code may leak the customer's payment details to the attacker...

How to Shop Online Like a Security Pro

'Tis the season when even those who know a thing or two about Internet scams tend to let down their guard in the face of an eye-popping discount or the stress of last-minute holiday shopping. So here's a quick refresher course on how to make it through the next few weeks without getting snookered...

Podcast: Breaking Down the Magecart Threat (Part One)

Threatpost editor Lindsey O’Donnell talks to Rapid7’s Chief Data Scientist, Bob Rudis, about the dangers that the Magecart group poses when it comes to e-commerce websites. Magecart, a financially motivated cyberattack group made up of several smaller gangs, has been behind recent payment-card...

Managing the Risk of IT-OT Convergence

A few years ago, it wasn’t easy getting executives on board with the concept of operational technology OT security. Having finally come around to acknowledging the need for information technology IT security, boards and C-suite executives at industrial enterprises were then faced with the...

Ahead of Black Friday, Rash of Malware Families Takes Aim at Holiday Shoppers

No less than 14 malware families are targeting e-commerce brands to steal from unsuspecting consumers ahead of the official holiday shopping season. As the Black Friday post-Thanksgiving buying bonanza looms, in all of its door-busting and elbow-throwing glory, many are opting to stay at home and...

Black Friday alert

Banking Trojans traditionally target users of online financial services; looking for financial data to steal or building botnets out of hacked devices for future attacks. However, over time, several of these banking Trojans have enhanced their functionality, launching new variants and extending...

That Domain You Forgot to Renew? Yeah, it’s Now Stealing Credit Cards

If you own a domain name that gets decent traffic and you fail to pay its annual renewal fee, chances are this mistake will be costly for you and for others. Lately, neglected domains have been getting scooped up by crooks who use them to set up fake e-commerce sites that steal credit card detail...

Mobile Shopping Growth Accelerates During Diwali

Diwali is the Hindu festival of lights, celebrated every autumn in October or November. According to Redseer Consulting, the sales volume during the festival usually accounts for about 35%-40% of the annual sales of e-commerce in India; for 2018 Redseer predicts $2.5 to $3 billion gross merchandi...

Degrau Publicidade e Internet Plataforma de E-commerce SQL Injection Vulnerability

Degrau Publicidade e Internet Plataforma de E-commerce is an e-commerce platform system. A SQL injection vulnerability exists in the Busca.aspx.cs file in Degrau Publicidade e Internet Plataforma de E-commerce. A remote attacker could exploit this vulnerability to execute arbitrary SQL commands...

WordPress Flaw Opens Millions of WooCommerce Shops to Takeover

Up to 4 million online merchants who use the popular WooCommerce WordPress plugin are vulnerable to a file deletion vulnerability that could allow a rogue “shop manager” to escalate privileges and eventually execute remote code on impacted websites. Researchers at RIPS Technologies trace the bug ...

CVE-2018-18963

Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via the busca/ URI...

Sql injection

Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via the busca/ URI...

CVE-2018-18963

Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via the busca/ URI...

CVE-2018-18963

The CVE-2018-18963 affects Degrau Publicidade e Internet Plataforma de E-commerce; the issue is a SQL Injection in the Busca.aspx.cs file exploitable via the busca/ URI. The CNVD entry confirms a SQL injection vulnerability exists in that file. No explicit root-cause details or patch/mitigation a...

CVE-2018-18963: Improper Neutralization of Special Elements used in an SQL Command

Busca.aspx.cs in Degrau Publicidade e Internet Plataforma de E-commerce allows SQL Injection via the busca/ URI...

PT-2018-14746

Name of the Vulnerable Software and Affected Versions Degrau Publicidade e Internet Plataforma de E-commerce affected versions not specified Description The issue concerns SQL Injection via the 'busca/' URI in the Busca.aspx.cs file. This allows for potential exploitation of the database...