2567 matches found
Magento eCommerce Web Sites SQL Injection (CVE-2015-1397)
An SQL injection vulnerability has been reported in Magento component. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2015-1175-xss-prestashop
CVE-2015-1175-xss-prestashop Information ——————– Advisory by Octogence. Name: Reflected XSS Vulnerability in prestashop ecommerce software Affected Software : Prestashop Affected Versions: 1.6.0.9 and possibly below Vendor Homepage : https://www.prestashop.com/ Vulnerability Type : Cross-site...
Prestashop 1.6.0.9 Cross Site Scripting
CVE-2015-1175-xss-prestashop Information ——————– Advisory by Octogence. Name: Reflected XSS Vulnerability in prestashop ecommerce software Affected Software : Prestashop Affected Versions: 1.6.0.9 and possibly below Vendor Homepage : https://www.prestashop.com/ Vulnerability Type : Cross-site...
Multiple Cross-Site Scripting Vulnerabilities in CosmoShop ePRO
CosmoShop ePRO is a cloud e-commerce system based on Magento. The system is able to quickly complete domain name setup, online store installation, server deployment and product launch. CosmoShop ePRO suffers from multiple cross-site scripting vulnerabilities that can be exploited by remote...
CosmoShop ePRO Cross-Site Request Forgery Vulnerability
CosmoShop ePRO is a cloud e-commerce system based on Magento. The system is able to quickly complete domain name setup, online store installation, server deployment and product launch. A cross-site request forgery vulnerability exists in CosmoShop ePRO 10.05.00, which allows remote attackers to...
Cart66 Lite WordPress Ecommerce 1.5.1.17 SQL Injection
Exploit Title: Cart66 Lite WordPress Ecommerce 1.5.1.17 Blind SQL Injection Date: 29-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link: https://downloads.wordpress.org/plugin/cart66-lite.1.5.1.17.zip Category: webapps 1. Description...
WordPress Ecommerce Cart66 Lite Plugin - Blind SQL Injection
Because of this vulnerability in WordPress Ecommerce Cart66 Lite plugin , shortcodeProductsTable is accessible for every registered user. Solution Update to version 1.5.2...
Cart66 Lite WordPress Ecommerce 1.5.1.17 Blind SQL Injection
Exploit for php platform in category web applications Exploit Title: Cart66 Lite WordPress Ecommerce 1.5.1.17 Blind SQL Injection Date: 29-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link:...
WordPress Plugin Cart66 Lite eCommerce 1.5.1.17 - Blind SQL Injection
WordPress Plugin Cart66 Lite eCommerce 1.5.1.17 - Blind SQL Injection Exploit Title: Cart66 Lite WordPress Ecommerce 1.5.1.17 Blind SQL Injection Date: 29-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link:...
WordPress Plugin Cart66 Lite eCommerce 1.5.1.17 - Blind SQL Injection
Exploit Title: Cart66 Lite WordPress Ecommerce 1.5.1.17 Blind SQL Injection Date: 29-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link: https://downloads.wordpress.org/plugin/cart66-lite.1.5.1.17.zip Category: webapps 1. Description...
Magento eCommerce FlashVar Parameter Cross-Site Scripting
A cross-site scripting vulnerability has been reported in Magento 1.9.0.1 FlashVar Parameter. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
CVE-2014-5516 CSRF protection bypass in "KonaKart" Java eCommerce product
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-5516 =================== "Cross-Site Request Forgery CSRF protection bypass" CWE-352 vulnerability in "KonaKart Storefront Application" Enterprise Java eCommerce product Vendor =================== DS Data Systems UK Ltd. Product...
WP eCommerce <= 3.8.7.5 - Unspecified SQL Injection
The WP eCommerce WordPress plugin was affected by an Unspecified SQL Injection security vulnerability...
KonaKart Storefront Application Cross Site Request Forgery
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-5516 =================== "Cross-Site Request Forgery CSRF protection bypass" CWE-352 vulnerability in "KonaKart Storefront Application" Enterprise Java eCommerce product Vendor =================== DS Data Systems UK Ltd. Product...
WordPress Ready! Ecommerce Plugin 0.5.0 - Multiple Vulnerabilities
This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...
Webasyst Shop Script 5.2.2.30933 Cross Site Scripting
Exploit Title:webasyst shop script stored xss Date: 8/12/2014 Exploit Author: Ankit Bharathan Description: shop-Script 5 Emerging PHP ecommerce framework that helps you increase sales.Feature-rich PHP shopping cart solution & ecommerce framework developed in 2013--2014. One of the leading shoppin...
TomatoCart 1.x - SQL Injection Vulnerability
Exploit for php platform in category web applications Title: TomatoCart v1.x latest-stable Remote SQL Injection Vulnerability Background: TomatoCart is open source ecommerce solution developed and maintained by a number of 64,000+ users from 50+ countries and regions. It's distributed under the...
TomatoCart 1.x - SQL Injection
TomatoCart 1.x - SQL Injection Title: TomatoCart v1.x latest-stable Remote SQL Injection Vulnerability Background: TomatoCart is open source ecommerce solution developed and maintained by a number of 64,000+ users from 50+ countries and regions. It's distributed under the terms of the GNU General...
TomatoCart 1.x Cross Site Scripting / SQL Injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2014-3978 - Remote SQL Injection Vulnerability CVE-2014-3830 - Reflected Cross Site Scripting - ------------------------------------------------------------------------------ Title: TomatoCart v1.x latest-stable Remote SQL Injection Vulnerability...