81 matches found
TIBCO Software Data Science和Statistica 跨站脚本漏洞
TIBCO Software Data Science and TIBCO Software Statistica are both products of TIBCO Software, Inc.TIBCO Software Data Science is a data science software. Simplifies data science and machine learning across hybrid ecosystems.TIBCO Software Statistica is a fully open platform for advanced analytic...
CVE-2022-30576: Improper Neutralization of Input During Web Page Generation
The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Trial contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site...
CVE-2022-30575: Improper Neutralization of Input During Web Page Generation
The Web Console component of TIBCO Software Inc.'s TIBCO Data Science - Workbench, TIBCO Statistica, TIBCO Statistica - Estore Edition, and TIBCO Statistica Trial contains easily exploitable Reflected Cross Site Scripting XSS vulnerabilities that allow a low privileged attacker with network acces...
estore-bike.com Cross Site Scripting vulnerability OBB-1443265
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows attackers to gain access to modify, add, or delete data, as well as to unauthorizedly access protected information.
The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete...
Razer: AWS subdomain Takeover at estore.razersynapse.com
The tester discovered the razersynapse.com domain was vulnerable to a subdomain takeover. Although this is out of scope of our program, we appreciate the tester bringing this to our attention...
estore-dognin.com XSS vulnerability
Open Bug Bounty ID: OBB-578707 Description| Value ---|--- Affected Website:| estore-dognin.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
beta-estore.com XSS vulnerability
Open Bug Bounty ID: OBB-559100 Description| Value ---|--- Affected Website:| beta-estore.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure bas...
mile2.com XSS vulnerability
Vulnerable URL: https://mile2.com/mile2-online-estore/search.html?keyword=1%22--!%3E%3CSvg/OnLoad=confirm%27OPENBUGBOUNTY%27%3E%22 Details: Description| Value ---|--- Patched:| Yes, at 15.11.2017 Latest check for patch:| 15.11.2017 20:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...
estore.corel.com Open Redirect vulnerability
Vulnerable URL: http://estore.corel.com/store/crelapac/enSG/RedirectToLandingPage/pgm.95708900?landingpage=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...
CVE-2003-0586
Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php...
CVE-2003-0585
The vulnerability (CVE-2003-0585) affects Brooky eStore 1.0.1–1.0.2b, comprising an SQL injection in login.asp that lets remote attackers bypass authentication and execute arbitrary SQL via the (1) user or (2) pass parameters. No additional exploit or patch details are provided in the supplied do...
CVE-2003-0586
Brooky eStore 1.0.1 through 1.0.2b is affected by a vulnerability that allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php. The issue impacts confidentiality (partial). No explicit exploitation details or remediation are provided in the suppl...
CVE-2003-0585
SQL injection vulnerability in login.asp of Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to bypass authentication and execute arbitrary SQL code via the 1 user or 2 pass parameters...
CVE-2003-0585: Undefined Security Weakness
SQL injection vulnerability in login.asp of Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to bypass authentication and execute arbitrary SQL code via the 1 user or 2 pass parameters...
CVE-2003-0586: Undefined Security Weakness
Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php...
eStore 1.0.1/1.0.2 Settings.inc.PHP Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8220/info eStore is prone to a path disclosure vulnerability. It has been reported that a remote attacker may make a direct HTTP request for an eStore include script and in doing so trigger an error. The resulting error...
eStore 1.0.2 - SQL Injection Vulnerability
No description provided by source. ===================================================================================================== .::Powered by eStore v1.0.2::. ===================================================================================================== x Author : R3VANBASTARD x W...
multiple Vulnerability in "WahmShoppes eStore"
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : multiple Vulnerability in "WahmShoppes eStore" Author : alieye vendor : http://www.wahmshoppes.com/ Contact : [email protected] Risk : High Class: Remote Google Dork: inurl:WsError.asp inurl:store/ We apologize but your request...
WahmShoppes eStore Cross Site Scripting / SQL Injection Vulnerabilities
WahmShoppes eStore suffers from cross site scripting, information disclosure, and remote SQL injection vulnerabilities. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : multiple Vulnerability in "WahmShoppes eStore" Author : alieye vendor : http://www.wahmshoppes.com/ Contact :...