2893 matches found
Active eCommerce CMS 6.5.0 Cross Site Scripting
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโ C r a C k E r โโ โโ T H E C R A C K O F E T E R N A L M I G H T โโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโ From The Ashes and Dust Rises An...
ecommerce-nation.com Cross Site Scripting vulnerability OBB-3458837
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Zhongbang CRMEB ไปฃ็ ้ฎ้ขๆผๆด
Zhongbang CRMEB is an open source e-commerce management system from Zhongbang Networks Zhongbang in Xi'an, China. A code issue vulnerability exists in Zhongbang CRMEB versions prior to 4.6.0. An attacker could exploit this vulnerability to cause data deserialization...
Expert Restaurant eCommerce 1.0 SQL Injection
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโ C r a C k E r โโ โโ T H E C R A C K O F E T E R N A L M I G H T โโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโ From The Ashes and Dust Rises An...
Magento eCommerce 2.4.0 Information Disclosure
==================================================================================================================================== | Title : Magento eCommerce v 2.4.0 sensitive information disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 Franรงais V.Pro / browser :...
CVE-2023-27640
An issue was discovered in the tshirtecommerce aka Custom Product Designer component 2.1.4 for PrestaShop. An HTTP request can be forged with the POST parameter type in the /tshirtecommerce/fonts.php endpoint, to allow a remote attacker to traverse directories on the system in order to open files...
1Two Ecommerce 1.0 Missing Authentication
==================================================================================================================================== | Title : 1Two Ecommerce 1.0 Unauthorized administrative access Vulnerability | | Author : indoushka | | Tested on : windows 10 Franรงais V.Pro / browser : Mozilla...
Design/Logic Flaw
Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server.This issue affects Rental Module: before 23.05.15...
Verydows ่ทจ็ซ่ฏทๆฑไผช้ ๆผๆด
Verydows is a lightweight open source e-commerce management system developed using the PHP language. Verytops Verydows suffers from a security vulnerability that stems from the presence of a cross-site request forgery CSRF vulnerability, which allows an attacker to execute arbitrary code via a...
CVE-2023-24408
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart plugin = 6.11.4 versions...
CVE-2023-24408
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart plugin = 6.11.4 versions...
Cross site scripting
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart plugin = 6.11.4 versions...
CVE-2023-24408
CVE-2023-24408 affects the Ecwid Ecommerce Shopping Cart WordPress plugin, where a Stored XSS vulnerability can be triggered in versions
PT-2023-19569 ยท Ecwid ยท Ecwid Ecommerce Shopping Cart
Name of the Vulnerable Software and Affected Versions: Ecwid Ecommerce Shopping Cart plugin versions = 6.11.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability requires authentication and affects users with contributor or higher permissions...
Wordpress plugin Ecommerce Shopping Cart ่ทจ็ซ่ๆฌๆผๆด
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...
CVE-2023-24408: Improper Neutralization of Input During Web Page Generation
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart plugin = 6.11.4 versions...
Zhongbang CRMEB ไปฃ็ ้ฎ้ขๆผๆด
Zhongbang CRMEB is an open source e-commerce management system from Zhongbang Networks Zhongbang in Xi'an, China. A code issue vulnerability exists in Zhongbang CRMEB version 4.6.0, which stems from an incorrect operation of the parameter filename resulting in unrestricted file uploads...
Cross-site Scripting (XSS) in Ecommerce Pricing Rules name field
Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.5.21 or apply this patch manually...
GHSA-CJV6-W5HF-5WR6 Cross-site Scripting (XSS) in Ecommerce Pricing Rules name field
Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.5.21 or apply this patch manually...
ecommerce.utm.my Cross Site Scripting vulnerability OBB-3266767
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...