3074 matches found
CS-Cart 4.2.0 Session Hijacking
Vendor: CS-Cart Homepage: https://www.cs-cart.com Fixed in: v4.2.1 Released: July 22nd 2014 CS-Cart is 127MB of shitty PHP and HTML code that is supposed to function as a secure e-commerce site. It is developed by people who don't reply to emails but who covertly patch bugs reported to them and...
Payment Gateways Caller for WP e-Commerce 0.1.0 - load_merchant Parameter Traversal Local file Inclusion
The Payment Gateways Caller for WP e-Commerce WordPress plugin was affected by a loadmerchant Parameter Traversal Local file Inclusion security vulnerability...
Welcart e-Commerce 1.3.12 - DOM Cross-Site Scripting (XSS)
The Welcart e-Commerce WordPress plugin was affected by a DOM Cross-Site Scripting XSS security vulnerability...
Welcart e-Commerce 1.3.12 - SQL Injection
The Welcart e-Commerce WordPress plugin was affected by a SQL Injection security vulnerability...
Welcart e-Commerce 1.3.12 - purchase_limit Parameter DOM-based XSS
The Welcart e-Commerce WordPress plugin was affected by a purchaselimit Parameter DOM-based XSS security vulnerability...
e-Commerce <= 3.4 - Arbitrary File Upload Exploit
The wp-shopping-cart WordPress plugin was affected by an Arbitrary File Upload Exploit security vulnerability...
Paypal BBP #108 MOS - Persistent Web Vulnerability
Document Title: =============== Paypal BBP 108 MOS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1049 PayPal Security UID: qw115bSN Release Date: ============= 2014-07-08 Vulnerability Laboratory ID VL-ID:...
.netCART Settings.XML Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8210/info .netCART is a web based e-commerce and shopping cart site designed for ASP.NET. It has been alleged that .netCART fails to adequately protect the contents of a directory in a default install. It is therefore...
Alisveristr E-commerce Login Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/15699/info Alisveristr E-commerce is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successf...
WORK System E-Commerce <= 3.0.1 - Remote Include Vulnerability
No description provided by source. ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================...
McMurtrey/Whitaker & Associates Cart32 3.0/3.1/3.5 DoS Vulnerability
No description provided by source. source : http://www.securityfocus.com/bid/1934/info Cart32 is a shopping cart application for e-commerce enabled sites. Cart32 is subject to a denial of service. When requesting a specially formed URL the application will cause the CPU utilization to spike to...
JShop E-Commerce Suite 1.2 Product.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12403/info JShop E-Commerce Suite is affected by a cross-site scripting vulnerability in the 'product.php' script. As a result of this vulnerability, it is possible for a remote attacker to create a malicious link...
Wordpress Plugin E-commerce <= 3.8.4 - SQL Injection Exploit
No description provided by source...
virtuemart <= 1.1.2 - Multiple Vulnerabilities
No description provided by source. Author: Janek Vind waraxe Date: 24. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-71.html Description of vulnerable software: VirtueMart is an Open Source E-Commerce solution to be used together with a Content Management System CMS...
DV Cart Shopping Cart software SQL Injection Vulnerability
No description provided by source. Exploit Title: DV Cart E-Commerce System SQL Injection Date: 19.08.2011 Author: Eyup CELIK Software Link: http://www.esmistudio.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example...
Eurofull E-Commerce Mensresp.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12420/info Reportedly Eurofull E-Commerce is affected by a cross-site scripting vulnerability in the 'mensresp.asp' script. This issue is due to a failure of the application to properly sanitize user-supplied input. As a...
pre multi-vendor shopping malls Multiple Vulnerabilities
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Pre...
CyberShop Ultimate E-commerce Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16473/info CyberShop Ultimate E-commerce is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...
Realtor WebSite System E-Commerce idfestival SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------------------------- Realtor WebSite System E-Commerce all files.php SQL Injection Vulnerability -------------------------------------------------------------------------------------------...
E-commerce Group (cat.php) SQL Injection Vulnerability
No description provided by source. Exploit Title: E-commerce Group cat.php SQL Injection Vulnerability Date: 2010/05/21 Author:BLack Revenge Software Link: Version: Tested on: CVE : ============================== E-commerce Group cat.php SQL Injection Vulnerability Founder: BLaCk RevenGe Email:-...