2567 matches found
Singles' Day Blows Away Its Own Records
Singles' Day in China is the world's largest shopping event. Since its beginnings in 1993 at Nanjing University, it has grown to become a national phenomenon. Singles' Day was originally started as a way to celebrate singles and as a protest against couple-centric festivals. The date 11/11 was...
Electricks eCommerce 1.0 - Cross-Site Request Forgery (Change Admin Password) Vulnerability
Exploit for php platform in category web applications Exploit Title: Electricks eCommerce 1.0 - Cross-Site Request Forgery Change Admin Password Exploit Author: Nawaf Alkeraithe Software Link: https://www.sourcecodester.com/sites/default/files/download/billyblue/electricks.zip Version: 1.0 PoC:...
Electricks eCommerce 1.0 - Cross-Site Request Forgery (Change Admin Password)
Electricks eCommerce 1.0 - Cross-Site Request Forgery Change Admin Password Exploit Title: Electricks eCommerce 1.0 - Cross-Site Request Forgery Change Admin Password Date: 2018-11-12 Exploit Author: Nawaf Alkeraithe Software Link:...
Electricks eCommerce 1.0 - Persistent Cross-Site Scripting
Electricks eCommerce 1.0 - Persistent Cross-Site Scripting Exploit Title: Electricks eCommerce 1.0 - Cross-Site Scripting Date: 2018-11-12 Exploit Author: Nawaf Alkeraithe Software Link: https://www.sourcecodester.com/sites/default/files/download/billyblue/electricks.zip Version: 1.0 When a user...
Electricks eCommerce 1.0 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Electricks eCommerce 1.0 - Cross-Site Scripting Exploit Author: Nawaf Alkeraithe Software Link: https://www.sourcecodester.com/sites/default/files/download/billyblue/electricks.zip Version: 1.0 When a user signs up for an accoun...
Electricks eCommerce 1.0 - Cross-Site Request Forgery (Change Admin Password)
Exploit Title: Electricks eCommerce 1.0 - Cross-Site Request Forgery Change Admin Password Date: 2018-11-12 Exploit Author: Nawaf Alkeraithe Software Link: https://www.sourcecodester.com/sites/default/files/download/billyblue/electricks.zip Version: 1.0 PoC: userid firstname lastname email...
Electricks eCommerce 1.0 - Persistent Cross-Site Scripting
Exploit Title: Electricks eCommerce 1.0 - Cross-Site Scripting Date: 2018-11-12 Exploit Author: Nawaf Alkeraithe Software Link: https://www.sourcecodester.com/sites/default/files/download/billyblue/electricks.zip Version: 1.0 When a user signs up for an account on the following url:...
Popular WooCommerce WordPress Plugin Patches Critical Vulnerability
If you own an eCommerce website built on WordPress and powered by WooCommerce plugin, then beware of a new vulnerability that could compromise your online store. Simon Scannell, a researcher at RIPS Technologies GmbH, discovered an arbitrary file deletion vulnerability in the popular WooCommerce...
Electricks eCommerce 1.0 - prodid SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Electricks eCommerce 1.0 - 'prodid' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/billyblue Software Link:...
Electricks eCommerce 1.0 - prodid SQL Injection
Electricks eCommerce 1.0 - prodid SQL Injection Exploit Title: Electricks eCommerce 1.0 - 'prodid' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/billyblue Software Link:...
Electricks eCommerce 1.0 SQL Injection
Exploit Title: Electricks eCommerce 1.0 - 'prodid' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/billyblue Software Link: https://www.sourcecodester.com/sites/default/files/download/billyblue/electricks.zip Version: 1.0...
Electricks eCommerce 1.0 - 'prodid' SQL Injection
Exploit Title: Electricks eCommerce 1.0 - 'prodid' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/billyblue Software Link: https://www.sourcecodester.com/sites/default/files/download/billyblue/electricks.zip Version: 1.0...
Stored Cross-site Scripting Vulnerability in S-CMS E-commerce System
S-CMS e-commerce system is an e-commerce software. A stored cross-site scripting vulnerability exists in the S-CMS e-commerce system. An attacker can insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...
No Data is an Island: One Infosec Pro’s Experience As a Consumer Involved in a Data Breach
British Airways BA was hit by a major breach that resulted in a loss of customer records. I was notified promptly by BA. I thought their public response was timely. By the way, this breach was announced while I was about to board a BA flight to Heathrow. My credit card was used to purchase my...
DRUPAL-CONTRIB-2018-057
This module enables you to build eCommerce websites and applications with Drupal. The module doesn't sufficiently check access for some of its entity types...
ShopsN Free Edition B2C E-commerce with SQL Injection Vulnerability
ShopsN free version of the B2C e-commerce is an enterprise-class commercial standards in line with the open source online store full network system. ShopsN free version of B2C e-commerce SQL injection vulnerability, an attacker can exploit the vulnerability to obtain sensitive information in the...
CVE-2018-15202
An issue was discovered in Juunan06 eCommerce through 2018-08-05. There is a CSRF vulnerability in ee/eBoutique/app/template/includes/crudTreatment.php that can add new users and add products...
CVE-2018-15202
An issue was discovered in Juunan06 eCommerce through 2018-08-05. There is a CSRF vulnerability in ee/eBoutique/app/template/includes/crudTreatment.php that can add new users and add products...
Cross site request forgery (csrf)
An issue was discovered in Juunan06 eCommerce through 2018-08-05. There is a CSRF vulnerability in ee/eBoutique/app/template/includes/crudTreatment.php that can add new users and add products...
