Magento input validation error vulnerability (CNVD-2019-39382)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A security vulnerability exists in Magento version 2.1 before 2.1.18, version 2.2 before 2.2.9, and version 2.3...

Magento code execution vulnerability (CNVD-2019-39391)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A security vulnerability exists in Magento version 2.1 before 2.1.18, version 2.2 before 2.2.9, and version 2.3...

CVE-2018-20849

Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATHINFO to the login/ URI...

CVE-2018-20849

Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATHINFO to the login/ URI...

Design/Logic Flaw

Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATHINFO to the login/ URI...

CVE-2018-20849

Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATHINFO to the login/ URI...

CVE-2018-20849

Arastta eCommerce 1.6.2 is affected by CVE-2018-20849: a cross-site scripting (XSS) vulnerability exploitable via PATH_INFO to the login/ URI. The root cause is insufficient input validation leading to stored/reflective-like misuse of user-controlled data that can affect the login path. Documente...

Arastta eCommerce Cross-Site Scripting Vulnerability

Arastta eCommerce is an open source eCommerce platform. A cross-site scripting vulnerability exists in Arastta eCommerce version 1.6.2. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute...

Magento cross-site scripting vulnerability (CNVD-2019-26238)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. There is a cross-site scripting vulnerability in Magento , the vulnerability stems from the lack of proper validati...

Wordpress Plugin Simple-e-commerce-shopping-cart DatabaseSQL Information Disclosure Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. An information disclosure vulnerability exists in the Wordpress plugin...

@bart.sk-ecommerce/node-touchstore-service (=1.0.17), @based/server (>=0.0.1 <=2.6.1) +156 more potentially affected by unknown CVE via squel (>=1.1.1 <=5.13.0)

squel NPM version =1.1.1, =0.0.1, =2.1.0, =1.1.2, =0.0.1, =2.0.0, =1.4.0, =0.1.1, =1.0.0, =0.11.4-canary.0f11eb2, =0.1.0, =0.0.1, =1.0.0, =1.0.15, =1.0.0, =1.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-4QHX-G9WP-G9M6...

Targeted Espionage-as-a-Service Takes Hold on the Dark Web

The cybercrime underground has become a service-driven, on-demand economy, including making available targeted corporate espionage services. According to an analysis, about 40 percent of Dark Web merchants offer spearphishing-as-a-service and targeted hacking services, aimed at infiltrating Fortu...

OIC Exponent CMS SQL Injection Vulnerability (CNVD-2019-16421)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from OIC, USA. The system supports direct editing in the page and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability exists in the...

CVE-2016-8898

Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...

File Upload Vulnerability in niushop Multi-Merchant Basic v1.11

NiuShop B2B2C Multi-Merchant Mall System is a PHP open source e-commerce system designed and developed completely independently by Shanxi NiuKu Information Technology Co. NiuShop B2B2C Multi-merchant Mall System Up.php file file upload vulnerability. An attacker can upload arbitrary files and...

Critical Unpatched Flaw Disclosed in WordPress WooCommerce Extension

If you own an eCommerce website built on WordPress and powered by WooCommerce plugin, then beware of a new, unpatched vulnerability that has been made public and could allow attackers to compromise your online store. A WordPress security company—called "Plugin Vulnerabilities"—that recently gone...

Arbitrary Code Execution Vulnerability in CRMEB Backend

CRMEB system is a set of customer relationship management + marketing e-commerce system, can really help enterprises based on WeChat public number, small program, to realize the member relationship management, data analysis, accurate marketing e-commerce management system. CRMEB backend exists...

In-Depth Analysis of JS Sniffers Uncovers New Families of Credit Card-Skimming Code

In a world that's growing increasingly digital, Magecart attacks have emerged as a key cybersecurity threat to e-commerce sites. Magecart, which is in the news a lot lately, is an umbrella term given to 12 different cyber criminal groups that are specialized in secretly implanting a special piece...

PHP Scripts Mall Custom T-Shirt Ecommerce Script Input Validation Vulnerability

PHP Scripts Mall Custom T-Shirt Ecommerce Script is a website system for customizing t-shirts online by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Custom T-Shirt Ecommerce Script version 3.1.1, which can be exploited by an attacker to change the amount of...

PHP Ecommerce Script 2.0.6 Cross Site Scripting / SQL Injection

Exploit Title: PHP Ecommerce Script 2.0.6 - Cross Site Scripting / SQL Injection Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: February 22, 2019 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link :...