CVE-2017-17629

CVE-2017-17629 affects Secure E-commerce Script 2.0.1 (PHP Scripts Mall). The vulnerability is an SQL Injection in category.php (parameters: searchmain, searchcat) and in single_detail.php (parameter: sid). This points to unsanitized user input leading to unauthorized data access and potential da...

CVE-2017-17610

The CVE-2017-17610 entry affects E-commerce MLM Software 1.0 . The vulnerability is a SQL Injection in multiple PHP pages: service_detail.php (pid parameter), event_detail.php (eventid parameter), and news_detail.php (newid parameter). Root cause: unsafely concatenated/unsanitized input enabling ...

PT-2017-14906

Name of the Vulnerable Software and Affected Versions E-commerce MLM Software version 1.0 Description The issue concerns SQL Injection, which can be exploited through specific parameters in several PHP files. The vulnerable parameters are pid in 'service detail.php', eventid in 'event detail.php'...

PT-2017-14925

Name of the Vulnerable Software and Affected Versions Secure E-commerce Script version 2.0.1 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters include searchmain or searchcat in the "category.php" endpoint,...

CVE-2017-17610: Improper Neutralization of Special Elements used in an SQL Command

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

CVE-2017-17629: Improper Neutralization of Special Elements used in an SQL Command

Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...

Secure E-commerce Script 2.0.1 SQL Injection

Exploit Title: Secure E-commerce Script 2.0.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version: 2.0.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Explo...

Secure E-commerce Script 2.0.1 - searchcat / searchmain SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Secure E-commerce Script 2.0.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version: 2.0.1 Category:...

Secure E-commerce Script 2.0.1 - 'searchcat' / 'searchmain' SQL Injection

Exploit Title: Secure E-commerce Script 2.0.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version: 2.0.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Explo...

Secure E-commerce Script 2.0.1 - searchcat searchmain SQL Injection

Secure E-commerce Script 2.0.1 - searchcat searchmain SQL Injection Exploit Title: Secure E-commerce Script 2.0.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/secure-e-commerce-script/ Version:...

E-commerce MLM Software 1.0 SQL Injection

Exploit Title: E-commerce MLM Software 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/e-commerce-mlm/ Demo: http://74.124.215.220/advaemlm/ Version: 1.0 Category: Webapps Tested on:...

E-commerce MLM Software 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: E-commerce MLM Software 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/e-commerce-mlm/ Demo: http://74.124.215.220/advaemlm/...

E-commerce MLM Software 1.0 - SQL Injection

E-commerce MLM Software 1.0 - SQL Injection Exploit Title: E-commerce MLM Software 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/e-commerce-mlm/ Demo: http://74.124.215.220/advaemlm/ Version: 1...

E-commerce MLM Software 1.0 - SQL Injection

Exploit Title: E-commerce MLM Software 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/e-commerce-mlm/ Demo: http://74.124.215.220/advaemlm/ Version: 1.0 Category: Webapps Tested on:...

PayPal Subsidiary Data Breach Hits Up to 1.6 Million Customers

Global e-commerce business PayPal has disclosed a data breach that may have compromised personally identifiable information for roughly 1.6 million customers at a payment processing company PayPal acquired earlier this year. PayPal Holdings Inc. said Friday that a review of its recently acquired...

Feds Seize Over 20,500 Domain Names For Selling Counterfeit Products

In a coordinated International cyber operation, law enforcement agencies have seized over 20,520 website domains for illegally selling counterfeit products, including luxury products, sportswear, electronics, pharmaceuticals and online piracy on e-commerce platforms and social networks...

What to expect for this year's Black Friday and Cyber Monday

Last year during holidays, US online sales surpassed $122 billion. This represented a 12 percent increase over the previous year. But beyond the overall growth, what's more interesting is that sales at physical stores dropped by 10 percent, the result of ongoing consumer comfort with and adoption...

What to expect for this year's Black Friday and Cyber Monday

Last year during holidays, US online sales surpassed $122 billion. This represented a 12 percent increase over the previous year. But beyond the overall growth, what's more interesting is that sales at physical stores dropped by 10 percent, the result of ongoing consumer comfort with and adoption...

Singles’ Day deal seekers beware

Originally a day set aside for singles in China to be proud of their singlehood, Singles' Day has been transformed into what is arguably the world’s single largest e-commerce festival, thanks to the involvement of The Alibaba Group. In fact, the Alibaba Group alone reported $17.8 billion in sales...

SQL Injection Vulnerability in Royal 100 E-commerce System

Shenzhen Royal Network Technology Co., Ltd. provides e-commerce enterprises and e-commerce logistics enterprises with enterprise-level e-commerce logistics system and supply chain consulting, design, development and technical operation and maintenance support services. A SQL injection vulnerabili...