326 matches found
NiuShop open source mall system Goods.php page SQL injection vulnerability
NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NiuShop open source mall system Goods.php page SQL injection vulnerability , attackers can exploit the...
NiuShop open source mall system Goods.php page with SQL injection vulnerability (CNVD-2017-36959)
NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NiuShop open source mall system Goods.php page SQL injection vulnerability , attackers can exploit the...
TPshop 前台SQL注入#2
0x01 说明 TPshop开源商城系统 Thinkphp shop的简称 ，是深圳搜豹网络有限公司开发的一套多商家模式的商城系统。适合企业及个人快速构建个性化网上商城。包含PC+IOS客户端+Adroid客户端+微商城，系统PC+后台是基于ThinkPHP5 MVC构架开发的跨平台开源软件，设计得非常灵活，具有模块化架构体系和丰富的功能，易于与第三方应用系统无缝集成，在设计上，包含相当全面，以模块化架构体系，让应用组合变得相当灵活，功能也相当丰富。 下载地址：http://www.tp-shop.cn/Index/Index/download.html 目录大概结构 ├─index.p...
SQL Injection Vulnerability in DuoDuo Rebate System V8.3_UTF8 official version admin\mod\goods\list.act.php
DuoDuo rebate system is for e-commerce rebate, shopping guide to provide solutions, is the open source PHP rebate site system. DuoDuo rebate web system V8.3UTF8 official version admin\mod\goods\list.act.php SQL injection vulnerability. The vulnerability is due to the system failing to effectively...
DuoDuoRebate V8.3_UTF8 official version admin_mod_goods_list.act.php has SQL injection vulnerability
DuoDuo rebate for e-commerce rebate, shopping guide to provide solutions, is the open source PHP rebate site system. DuoDuoRebate V8.3UTF8 official version adminmodgoodslist.act.php SQL injection vulnerability exists, the vulnerability is due to the system fails to effectively filter the content ...
Feds Seize Over 20,500 Domain Names For Selling Counterfeit Products
In a coordinated International cyber operation, law enforcement agencies have seized over 20,520 website domains for illegally selling counterfeit products, including luxury products, sportswear, electronics, pharmaceuticals and online piracy on e-commerce platforms and social networks...
Bargains and brotherhood: The underground Digital Souks of the Middle East
The release of our report “Digital Souks: A glimpse into the Middle Eastern and North African underground” marks the 12th in our Cybercriminal Underground Economy Series CUES. Having previously published several papers covering the Japanese, French, German, North American, Chinese, Russian and...
NiuShop open source mall system \application\shop\controller\goods.php file reflective cross-site scripting vulnerabilities
NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a PHP open source e-commerce system . NiuShop open source mall system \application\shop\controller\goods.php file there is a reflective cross-site...
SQL Injection Vulnerability in Cloud EC E-commerce System Goods.edit.php Page
Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system goods.edit.php page SQL injection vulnerability. The vulnerability is due to the...
Niushop open source mall system has multiple SQL injection vulnerabilities
NiuShop open source mall system , is by the Shanxi Niu Cool Information Technology Co., Ltd. completely independent design , research and development of a PHP open source e-commerce system . NiuShop open source mall system collectionGoodsOrShopt, cancelCollGoodsOrShop, platformAdvList,...
Ke361 Taoist Mall system GoodsController.class.php parameter id has SQL injection vulnerability
Ke361 is an open source Taobao system. A SQL injection vulnerability exists in the GoodsController.class.php parameter id of the Ke361 Taobao Mall system. Attackers can use to change the vulnerability to obtain database information...
AlphaBay Shut Down After Police Raid; Alleged Founder Commits Suicide in Jail
AlphaBay Market — one of the largest Dark Web marketplaces for drugs, guns, and other illegal goods — that mysteriously went dark earlier this month without any explanation from its admins has reportedly been shut down by the international authorities. On July 4th, the dark web marketplace sudden...
SQL Injection Vulnerability in Hanchao B2B2C Multi-User Mall System's goods_id Parameter
Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C multi-user mall system v2.1.3 version goodsid parameter SQL injection vulnerability exists, because the system fails to user-supplied parameters for effective filtering...
Niushop open source mall system goodshistory parameter SQL injection vulnerabilities exist
NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . Niushop open source mall system goodshistory parameters exist SQL injection vulnerability . As the system...
SQL Injection Vulnerability in Niushop Goods.php
NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NIUSHOP open source mall system goods.php file id parameter SQL injection vulnerability , the program for...
NIUSHOP open source mall system goods_id parameter SQL injection vulnerabilities exist
NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NIUSHOP open source mall system goodsid parameter exists SQL injection vulnerability . As the parameter is...
SQL Injection Vulnerability in DBSHOP_0.9.3_Beta goodsSearchAction Function
DBShop is an open source e-commerce online store system developed using endFramework. DBSHOP0.9.3Beta goodsSearchAction function SQL injection vulnerability . After obtaining the parameters timesort, clicksort, pricesort, the key name and key value will be spliced into the sql statement to bring ...
Stored Cross-Site Scripting Vulnerability in DBSHOP_0.9.3_Beta
DBShop is an open source e-commerce online store system developed using endFramework. A stored cross-site scripting vulnerability exists at DBSHOP0.9.3Beta /module/Goods/view/goods/ask/index.phtml. Due to the failure to handle the output to the page of the inquiry response, the content is directl...
SQL Injection Vulnerability in the Goodsid Parameter in the Add.aspx Page of the Office Automation System of Shanghai Shuang Yang Computer Hi-Tech Development Co.
Shanghai Shuang Yang Computer Hi-Tech Development Company Shuang Yang for short is a high-tech enterprise mainly engaged in application software development and system integration. The product /DSOATY/goods/GoodsAdd.aspx?goodsid=1&flag=2 at the existence of SQL injection vulnerability, the...