21498 matches found
Cross-site Scripting (XSS) - Stored in aimeos/aimeos-core
✍️ Description Integrated online shop based on Laravel 6 LTS and the Aimeos e-commerce framework this webapp is vulnerabel for stored xss thru filename 🕵️♂️ Proof of Concept 💥 Impact This vulnerability is capable stored XSS...
Cross-site Scripting (XSS) - Stored in aimeos/aimeos-laravel
✍️ Description Integrated online shop based on Laravel 6 LTS and the Aimeos e-commerce framework this webapp is vulnerabel for stored xss thru filename 🕵️♂️ Proof of Concept 💥 Impact This vulnerability is capable admin ac takeover , XSS...
Unspecified Vulnerability in Smartstore SmartStoreNET
Smartstore SmartStoreNET is an open source e-commerce Web platform of Germany Smartstore company . The platform includes CRM, CMS, sales, marketing, payment, order processing and other functions. A security vulnerability exists in SmartstoreNET version 4.1.1. The vulnerability stems from the...
Zhongbang CRMEB SQL Injection Vulnerability
Zhongbang CRMEB is an open source e-commerce management system of China Xi'an Zhongbang Network Zhongbang Company. Zhongbang CRMEB Mall System There is a SQL injection vulnerability in Zhongbang CRMEB Mall System V2.60 and V3.1 via the SQL injection vulnerability in the tablename parameter in...
Design/Logic Flaw
Talk 4 in Coral before 4.12.1 allows remote attackers to discover e-mail addresses and other sensitive information via GraphQL because permission checks use an incorrect data type...
Sylius Unauthorized Access Vulnerability
Sylius is a Polish company Sylius set of open source e-commerce platform based on the Symfony framework . A security vulnerability exists in Sylius versions prior to 1.9.5 and 1.10.0-RC, which stems from the fact that some of the details of an order placed in Sylius order ID, order number, total...
File upload vulnerability exists in Panavision e-office (CNVD-2021-49104)
Panmicro e-office is a standard collaborative mobile office platform under Panmicro. A file upload vulnerability exists in Panmicro e-office, which can be exploited by an attacker to gain control of the server...
Arbitrary File Read Vulnerability in MyCnCart of Qingdao All-in-One Network Technology Co.
MyCnCart MCC for short is a free, open source B2C, B2B e-commerce platform system developed for the Chinese mainland market. MyCnCart has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...
CVE-2021-28585
Magento versions 2.4.2 and earlier, 2.4.1-p1 and earlier and 2.3.6-p1 and earlier are affected by an Improper input validation vulnerability in the New customer WebAPI.Successful exploitation could allow an attacker to send unsolicited spam e-mails...
Command Execution Vulnerability in NBR6210-E of Beijing StarNet Ruijie Network Technology Co.
The NBR6210-E is an enterprise router from Ruijie Networks Co. A command execution vulnerability exists in the NBR6210-E of Beijing StarNet Ruijie Network Technology Co. that can be exploited by an attacker to execute arbitrary commands...
Weak Password Vulnerability in the Wireless Network Authentication Management System of Beijing Yilian Yitong Technology Co. Ltd (CNVD-2021-48939)
Ltd. is a company whose business scope includes: technology development, technology transfer, technology consulting; computer technology training; computer animation design; computer system services; application software services, basic software services and so on. Ltd. wireless network...
Shopware Unauthorized Access Vulnerability
Shopware is an open source e-commerce platform. An unauthorized access vulnerability exists in Shopware versions prior to 6.4.1.1. An attacker can exploit the vulnerability to gain direct access to private files stored at a cloud storage provider with a known hash url...
Online Pet Shop Web App SQL注入漏洞
Online Pet Shop Web App is an open source web application. It is used for e-commerce or online stores. A SQL injection vulnerability exists in Online Pet Shop Web App. The vulnerability stems from a lack of validation of externally entered SQL statements in a database-based application. An attack...
Shopware Information Disclosure Vulnerability (CNVD-2021-45748)
Shopware is an open source e-commerce platform. A sensitive information disclosure vulnerability exists in versions of Shopware prior to 5.6.10. An attacker can exploit this vulnerability to obtain leaked system information via Error Handler...
crmeb server-side request forgery vulnerability
Zhongbang CRMEB is an open source e-commerce management system from Zhongbang Networks Zhongbang in Xi'an, China. A security vulnerability exists in CRMEB 3.1.0+, which stems from the strict domain name filtering in CRMEB 3.1.0+ leading to SSRF Server Side Request Forgery. No detailed vulnerabili...
Shopware Information Disclosure Vulnerability
Shopware is an open source e-commerce platform. An information disclosure vulnerability exists in Shopware versions prior to 6.4.1.1. An attacker can exploit the vulnerability to expose internal hidden fields via the Management API when loading multiple references in an association...
Arbitrary File Download Vulnerability in e-cology 8 of Shanghai Panmicro Network Technology Co.
Ltd. was founded in 2001, headquartered in Shanghai, focusing on the field of collaborative management software, and is committed to collaborative OA as the core to help enterprises build a unified mobile office platform. Ltd. e-cology 8 arbitrary file download vulnerability, an attacker can use...
Arbitrary File Read Vulnerability in NBR6210-E
NBR6210-E is an Internet Behavior Management router from Riptide, which is designed for office full scenarios. The NBR6210-E suffers from an arbitrary file read vulnerability that can be exploited by an attacker to read arbitrary system files...
