Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 跨站脚本漏洞

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar is an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to a cross-site scripting vulnerability that stems from The ctgname parameter on the adminaddcata.php page lacks a checksum filter for...

CVE-2022-30478

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \searchproduct.php via the keyword parameters...

CVE-2022-30478

CVE-2022-30478 affects the package “Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0.” The vulnerability is a SQL Injection in search_product.php triggered by the keyword parameter, due to lack of input validation. Public records (NVD, RH, CNVD, CNNVD, CNVD, etc.) consistently describe it a...

CVE-2022-30482

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...

CVE-2022-30482

Vulnerability summary: The package named “Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0” is vulnerable to Cross Site Scripting (XSS) in the administrative page admin/add_cata.php via the ctg_name parameter. Root cause: The ctg_name input/output handling lacks a checksum/adequate filteri...

PT-2022-20138

Name of the Vulnerable Software and Affected Versions Ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 Description The issue concerns a Cross Site Scripting XSS problem. It occurs in the "admin/add cata.php" endpoint via the ctg name parameters. This allows for potential malicious...

PT-2022-20136

Name of the Vulnerable Software and Affected Versions Ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 Description The issue concerns SQL Injection in the search product.php file via the keyword parameters. This allows for potential manipulation of database queries. Recommendations...

CVE-2022-30482: Improper Neutralization of Input During Web Page Generation

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...

ShopXO 代码问题漏洞

ShopXO is an open source enterprise-level open source e-commerce system. A security vulnerability exists in ShopXO version 2.2.0, which originates from an arbitrary file upload issue in three locations...

How Traffic Analysis Boosts Ecommerce Profits

By Owais Sultan Attracting traffic is critical to the health of every ecommerce business. However, large traffic numbers dont necessarily result… This is a post from HackRead.com Read the original post: How Traffic Analysis Boosts Ecommerce Profits...

Magento eCommerce CE v2.3.5-p2 - Blind SQL injection Vulnerability

Exploit Title: Magento eCommerce CE v2.3.5-p2 - Blind SQLi Exploit Author: Aydin Naserifard Vendor Homepage: https://www.adobe.com/ Software Link: https://github.com/magento/magento2/releases/tag/2.3.5-p2 Version: 2.3.5-p2 Tested on: 2.3.5-p2 POC: 1PUT...

Magento eCommerce CE 2.3.5-p2 SQL Injection

Exploit Title: Magento eCommerce CE v2.3.5-p2 - Blind SQLi Date: 2021-4-21 Exploit Author: Aydin Naserifard Vendor Homepage: https://www.adobe.com/ Software Link: https://github.com/magento/magento2/releases/tag/2.3.5-p2 Version: 2.3.5-p2 Tested on: 2.3.5-p2 POC: 1PUT...

Magento eCommerce CE v2.3.5-p2 - Blind SQLi

Exploit Title: Magento eCommerce CE v2.3.5-p2 - Blind SQLi Date: 2021-4-21 Exploit Author: Aydin Naserifard Vendor Homepage: https://www.adobe.com/ Software Link: https://github.com/magento/magento2/releases/tag/2.3.5-p2 Version: 2.3.5-p2 Tested on: 2.3.5-p2 POC: 1PUT...

Vendure Cross-Site Scripting Vulnerability

Vendure is a headless GraphQL eCommerce framework based on Node.js and Nest ＆ TypeScript, focused on developer productivity and easy customization. version 0.1.0-alpha.2 to 1.5.1 of Vendure is vulnerable to a cross-site scripting vulnerability that stems from the program's lack of data validation...

Ecommerce-Website File Upload Vulnerability (CNVD-2022-65359)

Ecommerce-Website is complete e-commerce website with an administration panel built using PHP and MySql. version v1.1.0 of Ecommece-Website is vulnerable to file uploads, which can be exploited by attackers to execute arbitrary code via carefully crafted PHP files...

CVE-2022-27357

Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customerregister.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27357

Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customerregister.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27346

Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27357

Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customerregister.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27346

Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...