Malicious code in paypay-ecommerce-miniapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1b7ace2d557b78c19ca9d9f0d89799a93ced84a6b8f9715dfcc460999be4178 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5249 Malicious code in paypay-sample-ecommerce-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09b31b1430f2e801aefc6f5a16cfbd3d5311746728695bc5d3ae462fbba5049d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5248 Malicious code in paypay-ecommerce-miniapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1b7ace2d557b78c19ca9d9f0d89799a93ced84a6b8f9715dfcc460999be4178 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6781 Malicious code in unified-instantsearch-ecommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ff80f1a6e2f93cac154151478390d6909157ebbba55f755e1b48279cb83bc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unified-instantsearch-ecommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ff80f1a6e2f93cac154151478390d6909157ebbba55f755e1b48279cb83bc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-30478

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \searchproduct.php via the keyword parameters...

CVE-2022-30482

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...

CVE-2022-30478

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \searchproduct.php via the keyword parameters...

CVE-2022-30482

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...

Cross site scripting

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...

Sql injection

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \searchproduct.php via the keyword parameters...

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 跨站脚本漏洞

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar is an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to a cross-site scripting vulnerability that stems from The ctgname parameter on the adminaddcata.php page lacks a checksum filter for...

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar SQL注入漏洞

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to SQL injection, which stems from The keyword parameter of the searchproduct.php page lacks validation for external input SQL statements. An...

CVE-2022-30478

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \searchproduct.php via the keyword parameters...

CVE-2022-30478

CVE-2022-30478 affects the package “Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0.” The vulnerability is a SQL Injection in search_product.php triggered by the keyword parameter, due to lack of input validation. Public records (NVD, RH, CNVD, CNNVD, CNVD, etc.) consistently describe it a...

CVE-2022-30482

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...

CVE-2022-30482

Vulnerability summary: The package named “Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0” is vulnerable to Cross Site Scripting (XSS) in the administrative page admin/add_cata.php via the ctg_name parameter. Root cause: The ctg_name input/output handling lacks a checksum/adequate filteri...

ShopXO 代码问题漏洞

ShopXO is an open source enterprise-level open source e-commerce system. A security vulnerability exists in ShopXO version 2.2.0, which originates from an arbitrary file upload issue in three locations...

How Traffic Analysis Boosts Ecommerce Profits

By Owais Sultan Attracting traffic is critical to the health of every ecommerce business. However, large traffic numbers dont necessarily result… This is a post from HackRead.com Read the original post: How Traffic Analysis Boosts Ecommerce Profits...

Magento eCommerce CE v2.3.5-p2 - Blind SQLi

Exploit Title: Magento eCommerce CE v2.3.5-p2 - Blind SQLi Date: 2021-4-21 Exploit Author: Aydin Naserifard Vendor Homepage: https://www.adobe.com/ Software Link: https://github.com/magento/magento2/releases/tag/2.3.5-p2 Version: 2.3.5-p2 Tested on: 2.3.5-p2 POC: 1PUT...