2579 matches found
CVE-2020-13923
IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04...
CVE-2020-13923
IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04...
Security feature bypass
IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04...
CVE-2020-13923
CVE-2020-13923 is an IDOR vulnerability in the order processing feature of the ERP/commerce component of Apache OFBiz, affecting versions prior to 17.12.04. The connected CNVD entry characterizes the issue as an input validation error that enables bypassing security restrictions and direct access...
CVE-2020-13923
IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04...
Claire's Customers Targeted with Magecart Payment-Card Skimmer
A Magecart credit-card skimmer was used to attack online customers of the retailer Claire’s for a month and a half, according to researchers. Claire’s – a purveyor of jewelry and accessories – closed its 3,000 physical retail locations worldwide on March 20, in the wake of the COVID-19 pandemic. ...
SAP Commerce Information Disclosure Vulnerability
SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. This product supports sales management, marketing management, order management and operations management. An information disclosure vulnerability exists in SAP Commerce. An attacker could exploit this vulnerability to...
ebcwebstore.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1179281 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2020-020
Drupal Commerce is used to build eCommerce websites and applications. It's possible to configure commerce to permit orders by anonymous users. In this configuration, customers who do not choose to create an account upon checkout completion remain anonymous, and the resulting orders are never...
Sellacious eCommerce 4.6 - Persistent Cross-Site Scripting
Exploit Title: Sellacious eCommerce 4.6 - Persistent Cross-Site Scripting Exploit Author: gurbanli Date: 2020-05-13 Vendor Homepage: https://www.sellacious.com Version: 4.6 Software Link: https://www.sellacious.com/free-open-source-ecommerce-software Document Title: =============== Sellacious...
Sellacious eCommerce 4.6 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Sellacious eCommerce 4.6 - Persistent Cross-Site Scripting Exploit Author: gurbanli Vendor Homepage: https://www.sellacious.com Version: 4.6 Software Link: https://www.sellacious.com/free-open-source-ecommerce-software Document...
Sellacious eCommerce Shop Cross Site Scripting
Document Title: =============== Sellacious eCommerce - Multiple Persistent Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2226 Release Date: ============= 2020-05-08 Vulnerability Laboratory ID VL-ID: ===================================...
Sellacious eCommerce - Multiple Persistent Vulnerabilities
Document Title: =============== Sellacious eCommerce - Multiple Persistent Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2226 Release Date: ============= 2020-05-07 Vulnerability Laboratory ID VL-ID: ===================================...
Imperva Poised to Deliver its Leading Advanced Bot Protection and Network Security in India
With a presence in India since 2017, Imperva is continuing to provide a level of security excellence in the region. With Asia in general as both the target and source of most network DDoS attacks, and India topping the list for the first time in our latest DDoS threat landscape report, this is mo...
File Upload Vulnerability in OurPHP website builder system
OurPHP Aopia website building system is a enterprise + e-commerce marketing website building system. A file upload vulnerability exists in the OurPHP website builder system, which can be exploited by attackers to gain control of the web server...
Magento Arbitrary Code Execution Vulnerability (CNVD-2020-32305)
Adobe Magento is the United States of America Odo than Adobe company's set of open source PHP e-commerce system. The system provides rights management , search engines and payment gateways , etc. Magento Commerce is the commercial version of Magento . Magento has an arbitrary code execution...
Negative charge in shopping cart in Shopizer
Impact Using API or Controller based versions negative quantity is not adequately validated hence creating incorrect shopping cart and order total. Patches Adding a back-end verification to check that quantity parameter isn't negative. If so, it is set to 1. Patched in 2.11.0 Workarounds Without...
Jshop Small Program Mall has SQL Injection Vulnerability
Jshop small program mall is an open source e-commerce system, including WeChat small program, Alipay small program, APP, public number, H5 end, PC end, Jitterbug small program, today's headline small program, Pipi shrimp small program, watermelon video small program, for large and medium-sized...
ecommerce-pratique.info Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1143486 Security Researcher ELProfesor Helped patch 2791 vulnerabilities Received 8 Coordinated Disclosure badges Received 106 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting ecommerce-pratique.inf...
CVE-2020-2825
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Print Server. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One...