3114 matches found
PT-2020-15935
Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap versions prior to 2020-08-03 Description The issue allows for XSS in the application/modules/admin/views/advanced settings/languages.php file. Recommendations For versions prior to 2020-08-03, update to a versio...
PT-2020-15940
Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap versions prior to 2020-08-03 Description The issue allows for XSS in certain PHP files, specifically within the application/views/templates/clothesshop, application/views/templates/greenlabel, and...
PT-2020-15938
Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap versions prior to 2020-08-03 Description The issue allows for XSS in the application/modules/admin/views/ecommerce/publish.php file. Recommendations For versions prior to 2020-08-03, update to a version released...
CVE-2020-23976
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter...
CVE-2020-23978
SQL injection can occur in Soluzione Globale Ecommerce CMS v1 via the parameter " offerta.php"...
CVE-2020-23978
SQL injection can occur in Soluzione Globale Ecommerce CMS v1 via the parameter " offerta.php"...
CVE-2020-23976
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter...
CVE-2020-23975
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php' id parameter...
Sql injection
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter...
Sql injection
SQL injection can occur in Soluzione Globale Ecommerce CMS v1 via the parameter " offerta.php"...
Cross site scripting
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php' id parameter...
CVE-2020-23978
SQL injection can occur in Soluzione Globale Ecommerce CMS v1 via the parameter " offerta.php"...
CVE-2020-23978
Summary: CVE-2020-23978 affects Soluzione Globale Ecommerce CMS v1, with an SQL injection in the parameter “offerta.php” due to unsanitized input. Impact and severity are reflected as high/critical in the references, but the documents do not provide concrete exploit details or affected versions b...
CVE-2020-23976
Webexcels Ecommerce CMS 2.x (2017–2020) is affected by CVE-2020-23976 due to an SQL Injection in the content.php id parameter. The root cause is improper handling of the id input, enabling an attacker to influence SQL queries. The data shows an affected product/version range, and the CVSS metrics...
CVE-2020-23976
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter...
CVE-2020-23975
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php' id parameter...
CVE-2020-23975
CVE-2020-23975 affects Webexcels Ecommerce CMS 2.x (2017–2020). The vulnerability is a cross-site scripting flaw exploitable via the id parameter in search.php. No detailed exploit vectors or patch information are provided in the connected documents; remediation details are not stated. In summary...
Ltd. Ebuycms has a flaw in the logic of unification vulnerability
Ebuycms is an e-commerce mall platform system developed for a wide range of small and medium-sized enterprises. Ltd. Ebuycms has a statistical logic flaw vulnerability that can be exploited by attackers to repeatedly obtain coupons...
PT-2020-15610
Name of the Vulnerable Software and Affected Versions Soluzione Globale Ecommerce CMS version v1 Description The issue allows SQL injection to occur. This is related to the offerta.php parameter. Recommendations For Soluzione Globale Ecommerce CMS version v1, avoid using the offerta.php parameter...
CVE-2020-23975: Improper Neutralization of Input During Web Page Generation
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php' id parameter...