CVE-2018-19319

SRCMS 3.0.0 allows CSRF via admin.php?m=Admin&c=gifts&a=update to change goods prices with the super administrator's privileges...

CVE-2018-17132

admin/goodsupdate.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the attrvalue array parameter...

PHPMyWind Arbitrary Code Execution Vulnerability (CNVD-2018-19542)

PHPMyWind is a set of PHP and MySQL-based and W3C-compliant enterprise website building solutions. A security vulnerability exists in the admin/goodsupdate.php file in PHPMyWind version 5.5. The vulnerability can be exploited to execute arbitrary code with the help of the 'attrvalue' array...

WUZHI CMS SQL Injection Vulnerability (CNVD-2018-15403)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system. WUZHI CMS 4.1.0 version of the coreframe/app/order/admin/goods.php file there is a SQL injection vulnerability, the vulnerability stems from the program does not filte...

WordPress Woo Checkout for Digital Goods plugin <= 2.1 - Cross-site request forgery (CSRF) vulnerability

Cross-site request forgery CSRF vulnerability found by ThreatPress Research Team in WordPress Woo Checkout for Digital Goods plugin versions = 2.1. Solution Update the WordPress Woo Checkout for Digital Goods plugin to the latest available version at least 2.2...

Cross site request forgery (csrf)

An issue was discovered in the MULTIDOTS Woo Checkout for Digital Goods plugin 2.1 for WordPress. If an admin user can be tricked into visiting a crafted URL created by an attacker via spear phishing/social engineering, the attacker can change the plugin settings. The function...

CVE-2018-11633

The CVE-2018-11633 issue affects the MULTIDOTS Woo Checkout for Digital Goods plugin for WordPress (version 2.1). The vulnerability stems from the function woo_checkout_settings_page in class-woo-checkout-for-digital-goods-admin.php not validating CSRF against wp-admin/admin-post.php and lacking ...

WooCommerce Checkout For Digital Goods <= 2.1 - CSRF to Settings Change

The Digital Goods for WooCommerce Checkout WordPress plugin was affected by a CSRF to Settings Change security vulnerability...

SQL Injection Vulnerability in UQCMS Cloud Business B2B2C Multi-store System Version V1.3.2_20180309

UQCMS cloud business system is a program using PHP + MYSQL, template using smarty template B2B2C e-commerce software. UQCMS cloud business B2B2C multi-store system goodsact.class page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

member.fnf.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-602629 Description| Value ---|--- Affected Website:| member.fnf.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

farmermall.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-602577 Description| Value ---|--- Affected Website:| farmermall.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SQL Injection Vulnerability in iZhanCMS v2.1 GoodsController.php Page

Station CMS is an open source and free CMS content management system. iZhanCMS v2.1 SQL injection vulnerability exists in the GoodsController.php page, which can be exploited by attackers to obtain sensitive information from the database...

itchest.godo.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-568608 Description| Value ---|--- Affected Website:| itchest.godo.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cocolux.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-568544 Description| Value ---|--- Affected Website:| cocolux.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SQL injection vulnerability in the goods_order.class.php page of the B2B2C multi-store system of UQCMS Cloud Commerce (CNVD-2017-37553)

UQCMS cloud business system is a program using PHP + MYSQL, template using smarty template B2B2C e-commerce software. A SQL injection vulnerability exists in the goodsorder.class.php page of the UQCMS Cloud Business B2B2C Multi-Store System due to the program's failure to adequately filter...

lomonosov.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-556695 Description| Value ---|--- Affected Website:| lomonosov.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

astromart.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-554062 Description| Value ---|--- Affected Website:| astromart.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mirbag1.godo.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-527362 Description| Value ---|--- Affected Website:| mirbag1.godo.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jutongcang.com XSS vulnerability

Open Bug Bounty ID: OBB-466917 Description| Value ---|--- Affected Website:| jutongcang.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

pjtian.com XSS vulnerability

Open Bug Bounty ID: OBB-462242 Description| Value ---|--- Affected Website:| pjtian.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...