Online Furniture Shopping Ecommerce Website SQL注入漏洞

Kashipara Online Furniture Shopping Ecommerce Website is a fast online shopping ecommerce website from Kashipara. A SQL injection vulnerability exists in the Online Furniture Shopping Ecommerce Website, which is caused by a SQL injection vulnerability in the txtSearch parameter of the search.php...

PT-2024-29026

Name of the Vulnerable Software and Affected Versions Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description A problematic vulnerability has been found in the login.php file, where the manipulation of the txtAddress argument leads to cross-site scripting. This issue can be...

Kashipara Online Furniture Shopping Ecommerce Website 跨站脚本漏洞

Kashipara Online Furniture Shopping Ecommerce Website is a fast online shopping ecommerce website from Kashipara. A cross-site scripting vulnerability exists in Kashipara Online Furniture Shopping Ecommerce Website, which originates from a cross-site scripting vulnerability in the prodId paramete...

CVE-2024-4074: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file prodInfo.php. The manipulation of the argument prodId leads to cross site scripting. The attack may be launche...

CVE-2024-4072: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. It has been classified as problematic. Affected is an unknown function of the file search.php. The manipulation of the argument txtSearch leads to cross site scripting. It is possible to launch the attack...

CVE-2024-4070: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0 and classified as critical. This vulnerability affects unknown code of the file prodList.php. The manipulation of the argument prodType leads to sql injection. The attack can be initiated remotely. The...

CVE-2024-4069: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file search.php. The manipulation of the argument txtSearch leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-4071: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0 and classified as critical. This issue affects some unknown processing of the file prodInfo.php. The manipulation of the argument prodId leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2024-4075: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file login.php. The manipulation of the argument txtAddress leads to cross site scripting. It is possible to initiate the attack remotely. The...

PT-2024-28985

Name of the Vulnerable Software and Affected Versions Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description A critical issue was found in the file search.php, where the manipulation of the txtSearch argument leads to SQL injection. This can be initiated remotely...

PT-2024-28990

Name of the Vulnerable Software and Affected Versions Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description A critical issue has been identified, affecting the prodList.php file, where the manipulation of the prodType argument leads to SQL injection. This issue can be...

PT-2024-29007

Name of the Vulnerable Software and Affected Versions Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description A vulnerability was found in the Kashipara Online Furniture Shopping Ecommerce Website, affecting an unknown functionality of the file prodList.php. The manipulation...

CVE-2024-4073: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file prodList.php. The manipulation of the argument prodType leads to cross site scripting. The attack can...

CVE-2024-32558

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog allows Reflected XSS.This issue affects eCommerce Product Catalog: from n/a through 3.3.32...

CVE-2024-32558 WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog allows Reflected XSS.This issue affects eCommerce Product Catalog: from n/a through 3.3.32...

CVE-2024-32558

CVE-2024-32558 is a reflected XSS in the WordPress plugin “eCommerce Product Catalog” by impleCode, affecting versions from unknown up to 3.3.32. The issue stems from improper input neutralization during web page generation, enabling Reflected XSS payloads. Wordfence/Red Hat entries indicate the ...

CVE-2024-32558 WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog allows Reflected XSS.This issue affects eCommerce Product Catalog: from n/a through 3.3.32...

CVE-2024-32558: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog allows Reflected XSS.This issue affects eCommerce Product Catalog: from n/a through 3.3.32...

WordPress Plugin eCommerce Product Catalog 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Plugin...

WP EasyCart < 5.6.0 - Cross-Site Request Forgery

Description The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.5.19. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perfo...