CVE-2021-25205

SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the update parameter to empViewUpdate.php...

CVE-2021-25205

SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the update parameter to empViewUpdate.php...

CVE-2021-25205

SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the update parameter to empViewUpdate.php...

Sql injection

SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the update parameter to empViewUpdate.php...

CVE-2021-25205

SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the update parameter to empViewUpdate.php...

CVE-2021-25205

The CVE-2021-25205 entry concerns a SQL injection in SourceCodester E-Commerce Website V1.0. The vulnerability occurs in empViewUpdate.php via the update parameter, allowing remote attackers to execute arbitrary SQL statements. Connected documents consistently identify the affected software as So...

SourceCodester E-Commerce Website SQL注入漏洞

SourceCodester E-Commerce Website is a software application. A PHP e-commerce website project for bookstores. A SQL injection vulnerability exists in SourceCodester E-Commerce Website version V1.0, which originates from a lack of validation of the update parameter of empViewUpdate.php against an...

SQL Injection Vulnerability in ShopXO

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO SQL injection vulnerability , an attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in OurPHP (CNVD-2021-53970)

OURPHP is an enterprise website builder that combines e-commerce features. OurPHP has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Arbitrary file read vulnerability exists in ShopXO (CNVD-2021-57330)

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Zero-Day Attacks on Critical WooCommerce Bug Threaten Databases

A critical SQL-injection security vulnerability in the WooCommerce e-commerce platform and a related plugin has been under attack as a zero-day bug, researchers have disclosed. The exploitation prompted WooCommerce to release an emergency patch for the issue late on Wednesday. The bug could allow...

Critical SQL Injection Vulnerability Patched in WooCommerce

Update: The article originally credited Tommy DeVoss dawgyg for the discovery. Weve since been contacted by Tommy, who let us know that the credit should go to another researcher, Josh from DOS Development Operations Security On July 14, 2021, WooCommerce released an emergency patch for a SQL...

The vulnerability of the Sylius e-commerce software platform, related to the lack of protection for operational data, allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Sylius e-commerce software lies in the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Magecart Hackers Hide Stolen Credit Card Data Into Images for Evasive Exfiltration

Cybercrime actors part of the Magecart group have latched on to a new technique of obfuscating the malware code within comment blocksBlockcomment and encoding stolen credit card data into images and other files hosted on the server, once again demonstrating how the attackers are continuously...

Shaanxi Silicon Peak Network Technology Co., Ltd. website building system has file upload vulnerability

Shaanxi Silicon Peak Network Technology Co., Ltd. was founded in 2007 is a "website design, software development, microblogging, Internet marketing, e-commerce" and other integrated information technology services in one of the high-end brand IT organizations. Shaanxi Silicon Peak Network...

Cross-site Scripting (XSS) - Stored in aimeos/aimeos-core

✍️ Description Integrated online shop based on Laravel 6 LTS and the Aimeos e-commerce framework this webapp is vulnerabel for stored xss thru filename 🕵️‍♂️ Proof of Concept 💥 Impact This vulnerability is capable stored XSS...

Cross-site Scripting (XSS) - Stored in aimeos/aimeos-laravel

✍️ Description Integrated online shop based on Laravel 6 LTS and the Aimeos e-commerce framework this webapp is vulnerabel for stored xss thru filename 🕵️‍♂️ Proof of Concept 💥 Impact This vulnerability is capable admin ac takeover , XSS...

Unspecified Vulnerability in Smartstore SmartStoreNET

Smartstore SmartStoreNET is an open source e-commerce Web platform of Germany Smartstore company . The platform includes CRM, CMS, sales, marketing, payment, order processing and other functions. A security vulnerability exists in SmartstoreNET version 4.1.1. The vulnerability stems from the...

Zhongbang CRMEB SQL Injection Vulnerability

Zhongbang CRMEB is an open source e-commerce management system of China Xi'an Zhongbang Network Zhongbang Company. Zhongbang CRMEB Mall System There is a SQL injection vulnerability in Zhongbang CRMEB Mall System V2.60 and V3.1 via the SQL injection vulnerability in the tablename parameter in...

Sylius Unauthorized Access Vulnerability

Sylius is a Polish company Sylius set of open source e-commerce platform based on the Symfony framework . A security vulnerability exists in Sylius versions prior to 1.9.5 and 1.10.0-RC, which stems from the fact that some of the details of an order placed in Sylius order ID, order number, total...