Ecommerce Systempay 1.0 - Production KEY Brute Force

Ecommerce Systempay 1.0 - Production KEY Brute Force Exploit Title: Ecommerce Systempay 1.0 - Production KEY Brute Force Author: live3 Date: 2020-02-05 Vendor Homepage: https://paiement.systempay.fr/doc/fr-FR/ Software Link: https://paiement.systempay.fr/doc/fr-FR/module-de-paiement-gratuit/ Test...

Ecommerce Systempay 1.0 - Production KEY Brute Force Exploit

Exploit for php platform in category web applications Exploit Title: Ecommerce Systempay 1.0 - Production KEY Brute Force Author: live3 Vendor Homepage: https://paiement.systempay.fr/doc/fr-FR/ Software Link: https://paiement.systempay.fr/doc/fr-FR/module-de-paiement-gratuit/ Tested on: MacOs...

Stored Cross-site Scripting Vulnerability in UEESHOP of Guangzhou Lianya Network Technology Co.

UEESHOP is a domestic self-built website platform focusing on cross-border e-commerce, providing fast self-built website services for cross-border e-commerce retail sellers and foreign trade exporters. UEESHOP has a stored cross-site scripting vulnerability in Guangzhou Lianya Network Technology...

Guangzhou Lianya Network Technology Co., Ltd. UEESHOP exists logic flaws vulnerability Ueeshop exists logic flaws vulnerability

UEESHOP is a domestic self-built website platform focusing on cross-border e-commerce, providing fast self-built website services for cross-border e-commerce retail sellers and foreign trade exporters. Guangzhou Lianya Network Technology Co., Ltd UEESHOP has a logic flaw vulnerability. An attacke...

SQL Injection Vulnerability in Laike E-commerce Management System of Hunan One Eight Network Technology Co.

Laikipu e-commerce system focuses on interface aesthetics and user experience, creating a unique e-commerce system ecosystem. Hunan One Eight Network Technology Co., Ltd. Laike e-commerce management system there is a SQL injection vulnerability, the attacker can use the vulnerability to obtain...

File Upload Vulnerability in Laike E-commerce Management System v3.3 of Pickup Network Technology Co.

Laike e-commerce management system can be customized multi-terminal full-scene mall, focusing on interface aesthetics and user experience. A file upload vulnerability exists in the Laikai E-commerce Management System v3.3 of Pickup Network Technology Limited, which can be exploited by attackers t...

WordPress Swipe Checkout for WP e-Commerce Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Swipe Checkout for WP e-Commerce is an online payment plugin for e-commerce sites. A cross-site scripting vulnerability exists in...

SQL Injection Vulnerability in Laike Ecommerce Management System

Laike e-commerce system is an open source e-commerce system. Laike E-commerce Management System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in UQCMS B2B2C E-commerce System

UQCMS is a lightweight shopping software, light application, light deployment, multiple clients with different presentations.PHP+MySql easy to build, Smarty template tags, two open more convenient. Can be used for free for business. UQCMS B2B2C e-commerce system suffers from a SQL injection...

File Upload Vulnerability in Laikai Ecommerce System

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A file upload vulnerability exists in the Laike Ecommerce system, which can be exploited by attackers to upload malicious files...

SQL Injection Vulnerability in Laike E-commerce System (CNVD-2020-00510)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

File upload vulnerability in the backend of shopxo e-commerce system

ShopXO is an open source enterprise-level open source e-commerce system. shopxo e-commerce system backend file upload vulnerability , an attacker can exploit the vulnerability to execute arbitrary PHP code...

File Upload Vulnerability in Laike E-commerce System V2.0

Laike e-commerce management system is a small program open source system. Laike Ecommerce System V2.0 has a file upload vulnerability that can be exploited by attackers to upload malicious files...

Alibaba's Singles' Day Set Sales Records: Reinforces Mobile Optimization Lessons for All Retailers

On its 20th anniversary, Singles' Day 11 November, a popular Chinese shopping day meant to celebrate the status of those who are single, set a new one-day record of $38 billion in sales, a 26% increase over 2018 $30.7 billion, according to multiple media reports. However, according to Akamai data...

SQL injection vulnerability in in***.php file of Laikai e-commerce system (CNVD-2020-00181)

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system in.php file contains a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

Magento cross-site scripting vulnerability (CNVD-2019-40742)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. Magento has a cross-site scripting vulnerability. Attackers can use this vulnerability to execute client-side cod...

Magento cross-site scripting vulnerability (CNVD-2019-40743)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. Magento has a cross-site scripting vulnerability. Attackers can use this vulnerability to execute client-side cod...

Magento cross-site scripting vulnerability (CNVD-2019-40745)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. Magento has a cross-site scripting vulnerability. Attackers can use this vulnerability to execute client-side cod...

Security 101 for eCommerce Businesses

Understand the risks to ecommerce businesses and how to secure your online business. Know the fact from compliance to dealing with hackers, at any level of business maturity. The post Security 101 for eCommerce Businesses appeared first on Wallarm Blog...

Magento Arbitrary File Deletion Vulnerability (CNVD-2019-35412)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. Magento arbitrary file deletion vulnerability , an attacker can use the vulnerability to delete arbitrary files...