📄 Pizzafy Ecommerce System 1.0 SQL Injection

The admin/vieworder.php endpoint in Pizzafy Ecommerce System version 1.0 fails to properly sanitize the id GET parameter before passing it to a MySQL query. An authenticated administrator can manipulate this parameter to inject arbitrary SQL, leading to full database compromise. SQL Injection in...

CVE-2026-40098

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to version 20.17.0, the shared wishlist add-to-cart endpoint authorizes access with a public...

Netartmedia PHP Mall SQL注入漏洞

Netartmedia PHP Mall is an e-commerce platform system operated by the Bulgarian company Netartmedia. Version 4.1 of Netartmedia PHP Mall contains a SQL injection vulnerability. This vulnerability stems from multiple parameters that are susceptible to SQL injections, potentially allowing unverifie...

E-commerce 安全漏洞

E-commerce is a dynamic e-commerce website developed by Bhabishya Ghimire as an individual developer. Version 1.0.0 of E-commerce has a security vulnerability, which stems from improper handling of the getsafevalue function in the utility/function.php file. This vulnerability may lead to cross-si...

XMall 安全漏洞

XMall is a distributed e-commerce shopping mall based on SOA architecture by an individual developer at Exrick. A security vulnerability exists in XMall v1.1, which stems from improper handling of user input and could lead to cross-site scripting attacks...

How Thales Protects Online Retail Sites from AI-Driven Bots during Holiday Shopping Season

Every November and December, online retailers gear up for their biggest revenue surge of the year. But while the traffic and transactions climb, so does the threat level. Cybercriminals know exactly when customer activity and the pressure on retail systems is at its highest and they’re automating...

Kashipara Online Furniture Shopping Ecommerce Website 安全漏洞

Kashipara Online Furniture Shopping Ecommerce Website is a fast online shopping ecommerce website from Kashipara. A security vulnerability exists in Kashipara Online Furniture Shopping Ecommerce Website version 1.0, which stems from an unvalidated recoveremail parameter in userpasswordrecover.php...

EUVD-2017-9103

Malware in sbrugna...

EUVD-2017-9098

Malware in sbrugna...

EUVD-2017-17190

Malware in sbrugna...

EUVD-2020-17783

Malware in sbrugna...

EUVD-2020-6127

Malware in sbrugna...

EUVD-2020-17782

Malware in sbrugna...

EUVD-2017-9097

Malware in sbrugna...

EUVD-2020-17785

Malware in sbrugna...

EUVD-2023-38462

Malicious code in bioql PyPI...

EUVD-2023-52953

Malicious code in bioql PyPI...

EUVD-2023-50833

Malicious code in bioql PyPI...

EUVD-2024-51067

Malicious code in bioql PyPI...

EUVD-2021-34220

Malicious code in bioql PyPI...