3074 matches found
WordPress Welcart e-Commerce Plugin <= 1.3.12 - Multiple SQL Injection
Because of these vulnerabilities, the attackers can execute arbitrary SQL commands. Solution Update the plugin...
eBay.com ocsnext CSS Injection
Exploit Title: eBay.com ocsnext sub-domain Reflected CSS injection Date: 20/12/2014 Author: Yann CAM @ Synetis - ASafety Vendor or Software Link: www.ebay.com Version: / Category: Reflected CSS injection Google dork: Tested on: eBay.com ocsnext sub-domain Adobe description :...
Ghosts, goblins Grinch: Bash broken shell shellshock a more serious Linux vulnerability-vulnerability warning-the black bar safety net
Security researcher at the Linux operating system found in a group called the ghosts, goblins（Grinch's vulnerability, the vulnerability exists in the linux system, and Bash broken shell shellshock）vulnerabilities in victim machines to get the highest permissions. Ghosts, goblins overview Bash...
Alibaba Marketplace Vulnerability Puts Millions Of Shoppers at Risk
Alibaba Group has patched a major security vulnerability in one of its e-commerce portals that exposed account details of tens of millions of Merchants and shoppers to cyber criminals. An Israeli application security firm, AppSec Labs, found a Cross site scripting XSS vulnerability in AliExpress,...
Alibaba aliexpress exposure security vulnerability could compromise millions of users personal information-vulnerability warning-the black bar safety net
1 of 2 November 9 November 2 1:0 0 updates: According to the official feedback Alibaba security team have been in the first time to fix the vulnerability. ! According to foreign media reports, Alibaba's aliexpress website on the exposed security vulnerabilities that could impact the world of...
CVE-2014-9237
SQL injection vulnerability in Proticaret E-Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via a tem:Code element in a SOAP request...
Sql injection
SQL injection vulnerability in Proticaret E-Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via a tem:Code element in a SOAP request...
CVE-2014-9237
The CVE-2014-9237 issue concerns Proticaret E-Commerce 3.0, where a SQL injection can be triggered via a tem:Code element in a SOAP request. This vulnerability allows remote attackers to execute arbitrary SQL commands, with potential partial impact on confidentiality, integrity, and availability ...
CVE-2014-9237
SQL injection vulnerability in Proticaret E-Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via a tem:Code element in a SOAP request...
[Appcheck-NG] Unpatched Vulnerabilities in Magento E-Commerce Platform
On April 8th 2014, AppCheck reported several Cross Site Scripting Vulnerabilities in the Magento e-commerce platform via the eBay bug bounty program. eBay responded to inform us that the vulnerabilities had already been reported. However, since more than 6 months have passed and no fix is yet...
Proticaret E-Commerce Script 3.0 - SQL Injection (2)
Proticaret E-Commerce Script 3.0 - SQL Injection 2 Document Title: ============ Proticaret E-Commerce Script v3.0 = SQL Injection Release Date: =========== 13 Nov 2014 Product & Service Introduction: ======================== Proticaret is a free e-commerce script. Abstract Advisory Information:...
Proticaret E-Commerce Script 3.0 - SQL Injection Vulnerability
Proticaret E-Commerce Script version 3.0 suffers from a remote SQL injection vulnerability. Document Title: ============ Proticaret E-Commerce Script v3.0 = SQL Injection Release Date: =========== 13 Nov 2014 Product & Service Introduction: ======================== Proticaret is a free e-commerce...
Proticaret E-Commerce Script 3.0 - SQL Injection (2)
Document Title: ============ Proticaret E-Commerce Script v3.0 = SQL Injection Release Date: =========== 13 Nov 2014 Product & Service Introduction: ======================== Proticaret is a free e-commerce script. Abstract Advisory Information: ======================= BGA Security Team discovered...
Proticaret E-Commerce Script 3.0 SQL Injection
Document Title: ============ Proticaret E-Commerce Script v3.0 = SQL Injection Release Date: =========== 13 Nov 2014 Product & Service Introduction: ======================== Proticaret is a free e-commerce script. Abstract Advisory Information: ======================= BGA Security Team discovered...
Proticaret E-Commerce Script 3.0 - SQL Injection (1)
Proticaret E-Commerce Script 3.0 - SQL Injection 1 Document Title: ============ Proticaret E-Commerce Script v3.0 = SQL Injection Release Date: =========== 13 Nov 2014 Product & Service Introduction: ======================== Proticaret is a free e-commerce script. Abstract Advisory Information:...
Proticaret E-Commerce Script 3.0 - SQL Injection (1)
Document Title: ============ Proticaret E-Commerce Script v3.0 = SQL Injection Release Date: =========== 13 Nov 2014 Product & Service Introduction: ======================== Proticaret is a free e-commerce script. Abstract Advisory Information: ======================= BGA Security Team discovered...
PayPal Arbitrary Code Execution
Document Title: =============== PayPal Inc - Filter Bypass & Arbitrary Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=936 Video: http://www.vulnerability-lab.com/getcontent.php?id=1275 Vulnerability Magazine:...
PayPal MultiOrder Shipping Cross Site Scripting
Document Title: =============== PayPal Inc BugBounty 107 MultiOrder Shipping API - Persistent History Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1048 PayPal Security UID: dq115aYq Release Date: ============= 2014-10-27 Vulnerability...
LiteCart Security Advisory - Multiple XSS Vulnerabilities - CVE-2014-7183
Information ----------- Advisory by Netsparker. Name: Multiple XSS Vulnerabilities in LiteCart Affected Software : LiteCart Affected Versions: 1.1.2.1 and possibly below Vendor Homepage : http://www.litecart.net Vulnerability Type : Cross-site Scripting Severity : Important CVE-ID: CVE-2014-7183...
SA-CONTRIB-2014-101 - Ubercart - Cross Site Request Forgery
The Ubercart module provides a shopping cart and e-commerce features for Drupal. Cross Site Request Forgery CSRF The country administration links are not properly protected. A malicious user could trick a store administrator into enabling or disabling a country by getting them to visit a...