45 matches found
📄 Pizzafy Ecommerce System 1.0 SQL Injection
The admin/vieworder.php endpoint in Pizzafy Ecommerce System version 1.0 fails to properly sanitize the id GET parameter before passing it to a MySQL query. An authenticated administrator can manipulate this parameter to inject arbitrary SQL, leading to full database compromise. SQL Injection in...
CVE-2026-40098
Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to version 20.17.0, the shared wishlist add-to-cart endpoint authorizes access with a public...
Netartmedia PHP Mall SQL Injection Vulnerability
Netartmedia PHP Mall is an e-commerce platform system operated by the Bulgarian company Netartmedia. Version 4.1 of Netartmedia PHP Mall contains a SQL injection vulnerability. This vulnerability stems from multiple parameters that are susceptible to SQL injections, potentially allowing unverifie...
E-commerce security vulnerabilities
E-commerce is a dynamic e-commerce website developed by Bhabishya Ghimire as an individual developer. Version 1.0.0 of E-commerce has a security vulnerability, which stems from improper handling of the getsafevalue function in the utility/function.php file. This vulnerability may lead to cross-si...
XMall security vulnerabilities
XMall is a distributed e-commerce shopping mall based on SOA architecture by an individual developer at Exrick. A security vulnerability exists in XMall v1.1, which stems from improper handling of user input and could lead to cross-site scripting attacks...
How Thales Protects Online Retail Sites from AI-Driven Bots during Holiday Shopping Season
Every November and December, online retailers gear up for their biggest revenue surge of the year. But while the traffic and transactions climb, so does the threat level. Cybercriminals know exactly when customer activity and the pressure on retail systems is at its highest and they’re automating...
Kashipara Online Furniture Shopping E-commerce Website Security Vulnerability
Kashipara Online Furniture Shopping Ecommerce Website is a fast online shopping ecommerce website from Kashipara. A security vulnerability exists in Kashipara Online Furniture Shopping Ecommerce Website version 1.0, which stems from an unvalidated recoveremail parameter in userpasswordrecover.php...
EUVD-2017-9098
Malware in sbrugna...
EUVD-2017-9103
Malware in sbrugna...
EUVD-2020-17785
Malware in sbrugna...
EUVD-2020-17783
Malware in sbrugna...
EUVD-2017-9097
Malware in sbrugna...
EUVD-2020-17782
Malware in sbrugna...
EUVD-2020-6127
Malware in sbrugna...
EUVD-2017-17190
Malware in sbrugna...
EUVD-2021-34220
Malicious code in bioql PyPI...
EUVD-2023-23407
Malicious code in bioql PyPI...
EUVD-2023-51373
Malicious code in bioql PyPI...