WordPress Welcart e-Commerce plugin <= 2.2.7 - Authenticated System Information Disclosure vulnerability

Authenticated System Information Disclosure vulnerability discovered by Jerome Bruandet NinTechNet in WordPress Welcart e-Commerce plugin versions = 2.2.7. Solution Update the WordPress Welcart e-Commerce plugin to the latest available version at least 2.2.8...

Welcart e-Commerce < 2.2.8 - Authenticated System Information Disclosure

The uscesdownloadsysteminformation AJAX action of the plugin did not have capability check in place, allowing any authenticated user such as subscriber to can export data including WordPress settings, theme and plugins active/inactive along with their version, Welcart general settings and payment...

WordPress Welcart e-Commerce plugin <= 2.2.7 - Unauthenticated Information Disclosure vulnerability

Unauthenticated Information Disclosure vulnerability discovered by Jerome Bruandet NinTechNet in WordPress Welcart e-Commerce plugin versions = 2.2.7. Solution Update the WordPress Welcart e-Commerce plugin to the latest available version at least 2.2.8...

Welcart e-Commerce < 2.2.8 - Authenticated System Information Disclosure

The uscesdownloadsysteminformation AJAX action of the plugin did not have capability check in place, allowing any authenticated user such as subscriber to can export data including WordPress settings, theme and plugins active/inactive along with their version, Welcart general settings and payment...

Welcart e-Commerce < 2.2.8 - Unauthenticated Information Disclosure

The plugin did not have proper capability check in some of its functions, which could allow unauthenticated users to download the list of members, products and orders in CSV format...

Doftcoin has an unspecified vulnerability

Doftcoin is an application. An e-currency implementation, Doftcoin contains a security vulnerability that could be exploited by an attacker to hijack a victim's account and arbitrarily increase the digital supply of assets...

VulnCheck KEV: CVE-2016-0545

Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-0551,...

Cybozu Garoon E-mail Operation Restriction Bypass Vulnerability

An operational restriction bypass vulnerability exists in e-mail in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to change e-mail data without proper privileges...

Cybozu Garoon E-mail Incorrect Input Validation Vulnerability (CNVD-2021-59731)

A security vulnerability exists in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker could use this vulnerability to change e-mail data without proper privileges...

Fedora: Security Advisory for seamonkey (FEDORA-2021-424a36ea0f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the authentication of administrators via a specially crafted page...

CVE-2021-20783

The CVE-2021-20783 entry concerns a CSRF vulnerability in the Optical BB unit E-WMTA2.3, allowing a remote attacker to hijack administrator sessions through a specially crafted page. Affected component: Optical BB unit E-WMTA2.3. Root cause stated: cross-site request forgery vulnerability; exploi...

PEEL Shopping SQL Injection Vulnerability (CNVD-2021-61762)

PEEL Shopping is a PHP/MySQL architecture of open source e-commerce system. 9.4.0.1 prior version of PEEL Shopping has a SQL injection vulnerability, which can be exploited by attackers to inject malicious SQL queries and obtain sensitive database information...

SourceCodester E-Commerce Website Cross-Site Scripting Vulnerability

SourceCodester E-Commerce Website is an application. A PHP e-commerce website project for bookstores. SourceCodester E-Commerce Website v 1.0 is vulnerable to a cross-site scripting vulnerability that could be exploited to inject arbitrary web script or HTM into feedbackprocess.php via the subjec...

SourceCodester E-Commerce Website File Upload Vulnerability

SourceCodester E-Commerce Website is an application. A PHP e-commerce website project for bookstores. SourceCodester E-Commerce Website v 1.0 is vulnerable to file uploads, which can be exploited by attackers to execute arbitrary code via file uploads to prodViewUpdate.php...

SQL Injection Vulnerability in Panmicro OA e-office

Panmicro OA e-office is a standard collaborative mobile office platform under Panmicro. A SQL injection vulnerability exists in Panmicro OA e-office, which can be exploited by attackers to obtain sensitive information from the database...

SourceCodester E-Commerce Website SQL Injection Vulnerability

SourceCodester E-Commerce Website is a software application. A PHP e-commerce website project for bookstores. A SQL injection vulnerability exists in SourceCodester E-Commerce Website version V1.0, which originates from a lack of validation of the update parameter of empViewUpdate.php against an...

CVE-2021-25204

Cross-site scripting XSS vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script or HTM via the subject field to feedbackprocess.php...

CVE-2021-25204

Cross-site scripting XSS vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script or HTM via the subject field to feedbackprocess.php...

Cross site scripting

Cross-site scripting XSS vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script or HTM via the subject field to feedbackprocess.php...