OurPHP has an arbitrary file deletion vulnerability

OurPHP is an enterprise e-commerce website builder. OurPHP has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete arbitrary files on the server...

Arbitrary file deletion vulnerability in ourphp

OurPHP Aopia website builder is a enterprise + e-commerce marketing website builder system. OurPHP has an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary files...

Soluzione Globale Ecommerce CMS 1 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Soluzione Globale Ecommerce cms v1 SQL Injection Vulnerability Google Dork: intext:" Soluzione Globale s.r.l.s. " +inurl:/.php?id= Exploit Author: @ThelastVvV Vendor Homepage: https://www.soluzioneglobale.com/ Version: v1 Tested...

Webexcels Ecommerce CMS 2.x SQL Injection / Cross Site Scripting

Exploit Title: Webexcels Ecommerce CMS SQL Injection & XSS Vulnerability Google Dork: intext:intext:" By WEB EXCELS "+inurl:"?Id=" Date: 2020-03-27 Exploit Author: @ThelastVvV Vendor Homepage: https://www.webexcels.com/ Version: 2.x 2017,2018,2019,2020 Tested on: Ubuntu...

Webexcels Ecommerce CMS 2.x SQL Injection / Cross Site Scripting Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Webexcels Ecommerce CMS SQL Injection & XSS Vulnerability Google Dork: intext:intext:" By WEB EXCELS "+inurl:"?Id=" Exploit Author: @ThelastVvV Vendor Homepage: https://www.webexcels.com/ Version: 2.x 2017,2018,2019,2020 Tested...

SialWeb CMS eCommerce 1.0 / 1.1 Cross Site Scripting / SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: SialWeb CMS SQL Injection & XSS Vulnerability Google Dork: intext:" By Sial Web" +inurl:/.php?id= Exploit Author: @ThelastVvV Vendor Homepage: https://sialweb.net/ Tested on: Ubuntu...

SialWeb CMS eCommerce 1.0 / 1.1 Cross Site Scripting / SQL Injection

Exploit Title: SialWeb CMS SQL Injection & XSS Vulnerability Google Dork: intext:" By Sial Web" +inurl:/.php?id= Date: 2020-03-22 Exploit Author: @ThelastVvV Vendor Homepage: https://sialweb.net/ Tested on: Ubuntu --------------------------------------------------------- PoC 1: The remote sql...

DBshop is vulnerable to XSS

DBShop is an e-commerce system. DBshop suffers from an XSS vulnerability that can be exploited by an attacker to obtain an administrator cookie...

Sylius Environment Issues Vulnerabilities

Sylius is a set of Symfony framework based on open source e-commerce platform . An environmental issue vulnerability exists in Sylius. The vulnerability stems from an unreasonable environmental factor in a networked system or product. No detailed vulnerability details are provided at this time...

Ecommerce Systempay 1.0 - Production KEY Brute Force

Ecommerce Systempay 1.0 - Production KEY Brute Force Exploit Title: Ecommerce Systempay 1.0 - Production KEY Brute Force Author: live3 Date: 2020-02-05 Vendor Homepage: https://paiement.systempay.fr/doc/fr-FR/ Software Link: https://paiement.systempay.fr/doc/fr-FR/module-de-paiement-gratuit/ Test...

Ecommerce Systempay 1.0 Brute Force

Exploit Title: Ecommerce Systempay 1.0 - Production KEY Brute Force Author: live3 Date: 2020-02-05 Vendor Homepage: https://paiement.systempay.fr/doc/fr-FR/ Software Link: https://paiement.systempay.fr/doc/fr-FR/module-de-paiement-gratuit/ Tested on: MacOs Version: ALL ?php / INFORMATION Exploit...

Ecommerce Systempay 1.0 - Production KEY Brute Force Exploit

Exploit for php platform in category web applications Exploit Title: Ecommerce Systempay 1.0 - Production KEY Brute Force Author: live3 Vendor Homepage: https://paiement.systempay.fr/doc/fr-FR/ Software Link: https://paiement.systempay.fr/doc/fr-FR/module-de-paiement-gratuit/ Tested on: MacOs...

Ecommerce Systempay 1.0 - Production KEY Brute Force

Exploit Title: Ecommerce Systempay 1.0 - Production KEY Brute Force Author: live3 Date: 2020-02-05 Vendor Homepage: https://paiement.systempay.fr/doc/fr-FR/ Software Link: https://paiement.systempay.fr/doc/fr-FR/module-de-paiement-gratuit/ Tested on: MacOs Version: ALL ?php / INFORMATION Exploit...

Stored Cross-site Scripting Vulnerability in UEESHOP of Guangzhou Lianya Network Technology Co.

UEESHOP is a domestic self-built website platform focusing on cross-border e-commerce, providing fast self-built website services for cross-border e-commerce retail sellers and foreign trade exporters. UEESHOP has a stored cross-site scripting vulnerability in Guangzhou Lianya Network Technology...

Guangzhou Lianya Network Technology Co., Ltd. UEESHOP exists logic flaws vulnerability Ueeshop exists logic flaws vulnerability

UEESHOP is a domestic self-built website platform focusing on cross-border e-commerce, providing fast self-built website services for cross-border e-commerce retail sellers and foreign trade exporters. Guangzhou Lianya Network Technology Co., Ltd UEESHOP has a logic flaw vulnerability. An attacke...

SQL Injection Vulnerability in Laike E-commerce Management System of Hunan One Eight Network Technology Co.

Laikipu e-commerce system focuses on interface aesthetics and user experience, creating a unique e-commerce system ecosystem. Hunan One Eight Network Technology Co., Ltd. Laike e-commerce management system there is a SQL injection vulnerability, the attacker can use the vulnerability to obtain...

File Upload Vulnerability in Laike E-commerce Management System v3.3 of Pickup Network Technology Co.

Laike e-commerce management system can be customized multi-terminal full-scene mall, focusing on interface aesthetics and user experience. A file upload vulnerability exists in the Laikai E-commerce Management System v3.3 of Pickup Network Technology Limited, which can be exploited by attackers t...

WordPress Swipe Checkout for WP e-Commerce Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Swipe Checkout for WP e-Commerce is an online payment plugin for e-commerce sites. A cross-site scripting vulnerability exists in...

SQL Injection Vulnerability in Laike Ecommerce Management System

Laike e-commerce system is an open source e-commerce system. Laike E-commerce Management System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

File Upload Vulnerability in Laikai Ecommerce System

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A file upload vulnerability exists in the Laike Ecommerce system, which can be exploited by attackers to upload malicious files...