2595 matches found
Active eCommerce CMS 6.5.0 SQL Injection
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
Shopware 代码问题漏洞
Shopware is a suite of open source e-commerce software from the German company Shopware. A code issue exists in Shopware where a vulnerability exists because the administrative session expiration date is set to one week, which allows an attacker to use the session for a long period of time if the...
eCart Multi Vendor eCommerce System 1.x Insecure Settings
==================================================================================================================================== | Title : eCart – Multi Vendor eCommerce System 1.x Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser :...
WP eCommerce Plugin for WordPress < 3.8.7.6 SQL Injection
The WordPress WP eCommerce Plugin installed on the remote host is affected by a SQL Injection. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...
Active Ecommerce CMS 6.4.0 Backdoor Account
==================================================================================================================================== | Title : Active ecommerce cms v6.4.0 Backdoor Account Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...
Avoid The (Automated) Nightmare Before Christmas
While Christmas is often seen by most as a joyous time to be spent with family and friends, exchanging good wishes and gifts, there are those who seek to exploit it. For fraudsters, this time of the year is above all, an opportunity for profits to be made, all while wreaking havoc on eCommerce...
SAP Commerce跨站脚本漏洞
SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. It supports sales management, marketing management, order management and operations management. A cross-site scripting vulnerability exists in several versions of SAP Commerce Webservices 2.0, which stems from a lack of...
WordPress plugin Welcart e-Commerce 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
Why is Robust API Security Crucial in eCommerce?
API attacks are on the rise. One of their major targets is eCommerce firms like yours. APIs are a vital part of how eCommerce businesses are accelerating their growth in the digital world. ECommerce platforms use APIs at all customer touchpoints, from displaying products to handling shipping. Owi...
CVE-2022-45990
A cross-site scripting XSS vulnerability in the component /signupscript.php of Ecommerce-Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the eMail parameter...
CVE-2022-45990
A cross-site scripting XSS vulnerability in the component /signupscript.php of Ecommerce-Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the eMail parameter...
Cross site scripting
A cross-site scripting XSS vulnerability in the component /signupscript.php of Ecommerce-Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the eMail parameter...
CVE-2022-45990
A cross-site scripting XSS vulnerability in the component /signupscript.php of Ecommerce-Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the eMail parameter...
Ecommerce-Website 跨站脚本漏洞
Ecommerce-Website is complete e-commerce website with administration panel built using PHP and MySql. A security vulnerability exists in Ecommerce-Website v1.0, which originates from the presence of cross-site scripting XSS in the component /signupscript.php, allowing attackers to execute arbitra...
CVE-2022-45990
The provided documents identify CVE-2022-45990 as a cross-site scripting (XSS) vulnerability in Ecommerce-Website v1.0, specifically in the /signup_script.php component, exploitable via a crafted payload in the eMail parameter. The impact stated is that attackers can execute arbitrary web scripts...
PT-2022-27712 · Unknown · Ecommerce-Website
Name of the Vulnerable Software and Affected Versions: Ecommerce-Website version 1.0 Description: A cross-site scripting XSS issue in the /signup script.php component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the eMail parameter. Recommendations...
CVE-2022-45990
A cross-site scripting XSS vulnerability in the component /signupscript.php of Ecommerce-Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the eMail parameter...
Ecommerce 1.0 Cross Site Scripting / Open Redirect
Title: Ecommerse-1.0 XSS-Reflected Hijack-credentials - JavaScript Injection Author: nu11secur1ty Date: 11.23.2022 Vendor: https://github.com/winston-dsouza Software: https://github.com/winston-dsouza/ecommerce-website Reference:...
WordPress Welcart eCommerce directory traversal vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Welcart eCommerce 2.7.7 and earlier versions are vulnerable to a directory traversal vulnerability,...