3074 matches found
WordPress Welcart E-Commerce Plugin - Multiple Vulnerabilities
This plugin is prone to a cross site request forgery and cross site scripting vulnerabilities. Solution Update the plugin...
WordPress Welcart E-Commerce Plugin <= 1.3.12 - Cross Site Scripting
This plugin is prone to a DOM cross site scripting vulnerability. Solution Update the plugin...
Welcart e-Commerce < 1.4.18 - Multiple Vulnerabilities
The Welcart e-Commerce WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
WordPress WP e-Commerce Shop Styling Plugin Arbitrary File Download Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.WP e-Commerce Shop Styling is one of the plugin used to improve the style of WP e-commerce store templates. An...
WordPress E-Commerce Shop Styling Plugin 2.5 - Arbitrary File Download
E-Commerce Shop Styling plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Upgrade the plugin...
WordPress Plugin WP E-Commerce Shop Styling 2.5 - Arbitrary File Download
Title: Remote file download vulnerability in wordpress plugin wp-ecommerce-shop-styling v2.5 Author: Larry W. Cashdollar, @larry0 Date: 2015-07-05 Download Site: https://wordpress.org/plugins/wp-ecommerce-shop-styling Vendor: https://profiles.wordpress.org/haet/ Vendor Notified: 2015-07-05, fixed...
WP e-Commerce Shop Styling <= 2.5 - Local File Inclusion
The code in ./wp-ecommerce-shop-styling/includes/download.php does not sanitise user input to prevent sensitive system files from being downloaded. You'll have to rename the download file via mv -- -..-..-..-..-..-..-..-..-etc-passwd passwd as the filename is set to the download filename with pat...
WP e-Commerce Shop Styling <= 2.5 - Local File Inclusion
The code in ./wp-ecommerce-shop-styling/includes/download.php does not sanitise user input to prevent sensitive system files from being downloaded. You'll have to rename the download file via mv -- -..-..-..-..-..-..-..-..-etc-passwd passwd as the filename is set to the download filename with pat...
Hackers Exploit Zero-Day Magento Vulnerability to Steal Your Credit Cards
Hackers are increasingly exploiting an unknown flaw to siphon payment card information from e-commerce websites that use Magento, the most popular e-commerce platform owned by eBay. Security researchers at Sucuri are still investigating the attack vector, but they believe that cyber criminals are...
WordPress e-Commerce Plugin <= 3.8.9 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress e-Commerce Plugin <= 3.9.2 - Reflected XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress E-Commerce Predictive Search Plugin - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress e-Commerce Plugin <= 3.8.14.3 - Authorisation Bypass
This plugin is prone to an authorisation bypass vulnerability. Solution Upgrade the plugin...
WordPress e-Commerce Plugin <= 3.8.9 - SQL Injection
Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...
WordPress e-Commerce Plugin 3.8.9.5 - File Upload
This plugin is prone to a GIF file upload vulnerability. Solution Upgrade the plugin...
WordPress E-Commerce Predictive Search Plugin - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress e-Commerce Plugin 3.8.9.5 - File Upload
This plugin is prone to a GIF file upload vulnerability. Solution Upgrade the plugin...
WordPress e-Commerce Plugin <= 3.8.9.5 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
PayPal Inc Bug Bounty #114 - JDWP RCE Vulnerability
Document Title: =============== PayPal Inc Bug Bounty 114 - JDWP RCE Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1474 Video: http://www.vulnerability-lab.com/getcontent.php?id=1474 Release Date: ============= 2015-04-28 Vulnerability...
PayPal Inc Bug Bounty #114 - JDWP RCE Vulnerability
Document Title: =============== PayPal Inc Bug Bounty 114 - JDWP RCE Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1474 Video: http://www.vulnerability-lab.com/getcontent.php?id=1474 Release Date: ============= 2015-04-28 Vulnerability...