CVE-2020-23976: Improper Neutralization of Special Elements used in an SQL Command

Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter...

CVE-2020-23978: Improper Neutralization of Special Elements used in an SQL Command

SQL injection can occur in Soluzione Globale Ecommerce CMS v1 via the parameter " offerta.php"...

PT-2020-15609

Name of the Vulnerable Software and Affected Versions Webexcels Ecommerce CMS versions 2.x, 2017, 2018, 2019, 2020 Description The issue concerns a cross-site scripting problem. It is related to the "search.php" id parameter. Recommendations For Webexcels Ecommerce CMS versions 2.x, 2017, 2018,...

SQL Injection Vulnerability in EbuyCMS of Hainan Eju Technology Co.

Ebuycm is a professional-grade e-commerce mall platform system developed for small and medium-sized enterprises. A SQL injection vulnerability exists in EbuyCMS of Hainan E&U Technology Co. An attacker can exploit the vulnerability to obtain sensitive database information...

PT-2020-6753

Name of the Vulnerable Software and Affected Versions Webexcels Ecommerce CMS versions 2.x, 2017, 2018, 2019, 2020 Description The issue is related to a SQL Injection vulnerability via the id parameter in the content.php script. This vulnerability is due to a lack of protection measures for the S...

Travel Management System 1.0 Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Travel Management System v1.0 - Unauthenticated Remote Code Execution Exploit Author: Adeeb Shah @hyd3sec & Bobby Cooke boku Vulnerability Discovery: Adeeb Shah @hyd3sec Date: August 10, 2020 Vendor Homepage:...

Solidus Input Validation Error Vulnerability

Solidus is an open source e-commerce system. An input validation error vulnerability exists in Solidus versions prior to 2.8.6, prior to 2.9.6, and prior to 2.10.2. The vulnerability stems from a network system or product that does not properly validate incoming data. No detailed vulnerability...

Arbitrary Code Execution Vulnerability in Verydows Backend

Verydows is a completely free and open source e-commerce management system developed using PHP, featuring cross-platform, lightweight, high performance, high load and security stability. Verydows backend arbitrary code execution vulnerabilities, attackers can exploit the vulnerability to obtain...

File Upload Vulnerability in Verydows 2.0 Backend

Verydows is a free and open source e-commerce management system developed using PHP, featuring cross-platform, lightweight, high performance and strong security. Verydows 2.0 backend file upload vulnerability, attackers can exploit the vulnerability to obtain server privileges...

SQL Injection Vulnerability in 5vshop E-commerce System of Shijiazhuang Zhenhong Network Technology Co.

5vshop belongs to Shijiazhuang Zhenghong Network Technology Co., Ltd, since 2004 has been committed to the enterprise Internet application of related services, engaged in enterprise, personal e-commerce website construction; e-commerce project planning, creativity, operation, to provide a...

OurPHP website builder system suffers from an arbitrary file read vulnerability.

OurPHP Aopia website building system is a enterprise + e-commerce marketing website building system. OurPHP website builder system has an arbitrary file reading vulnerability, which can be exploited by attackers to read arbitrary system files...

CVE-2020-13923

IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04...

CVE-2020-13923

IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04...

Security feature bypass

IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04...

CVE-2020-13923

CVE-2020-13923 is an IDOR vulnerability in the order processing feature of the ERP/commerce component of Apache OFBiz, affecting versions prior to 17.12.04. The connected CNVD entry characterizes the issue as an input validation error that enables bypassing security restrictions and direct access...

CVE-2020-13923

IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04...

CVE-2020-13923

IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04...

CVE-2020-13923: Authorization Bypass Through User-Controlled Key

IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04...

PT-2020-13783

Name of the Vulnerable Software and Affected Versions Apache OFBiz versions prior to 17.12.04 Description The issue is related to an IDOR vulnerability in the order processing feature of the ecommerce component. This vulnerability may allow unauthorized access or modifications to orders...

Claire's Customers Targeted with Magecart Payment-Card Skimmer

A Magecart credit-card skimmer was used to attack online customers of the retailer Claire’s for a month and a half, according to researchers. Claire’s – a purveyor of jewelry and accessories – closed its 3,000 physical retail locations worldwide on March 20, in the wake of the COVID-19 pandemic. ...