Sql injection

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...

Cross site scripting

Cross Site Scripting XSS vulnerability in HuCart 5.7.4 via nickname in index.php...

Sql injection

SQL Injextion vulnerability exists in Whatsns 4.0 via the ip parameter in index.php?adminbanned/add.htm...

HuCart Cross-Site Scripting Vulnerability

HuCart HuCart is a PHP Mysql-based free open source enterprise website system. HuCart 5.7.4 has a cross-site scripting vulnerability, which can be exploited by attackers to conduct cross-site scripting attacks via the nickname in index.php...

CVE-2020-18158

Cross Site Scripting XSS vulnerability in HuCart 5.7.4 via nickname in index.php...

CVE-2020-18158

Technical details about CVE-2020-18158 are not publicly provided in the supplied documents. No confirmed affected versions or fixes are listed here. Monitor for updates from vendors and security advisories.

CVE-2020-18157

MetInfo 6.1.3 is affected by a Cross-Site Request Forgery (CSRF) vulnerability via the doaddsave action in admin/index.php. Root cause: CSRF in that action allows state-changing requests without proper user authentication. CVE-2020-18157 has a CVSS‑v3.1 base score of 8.8 (HIGH) with vectors CVSS:...

CVE-2020-18157

Cross Site Request Forgery CSRF vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php...

PT-2021-10143

Name of the Vulnerable Software and Affected Versions: HuCart version 5.7.4 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It occurs via the nickname in index.php. This allows for potential malicious script execution. Recommendations: For HuCart version 5.7.4, upda...

PT-2021-10142

Name of the Vulnerable Software and Affected Versions: MetInfo version 6.1.3 Description: A Cross Site Request Forgery CSRF issue exists, which can be exploited via a doaddsave action in the admin/index.php API endpoint. This allows for unauthorized actions to be performed on behalf of a user...

CVE-2020-18158: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in HuCart 5.7.4 via nickname in index.php...

CVE-2020-18157: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php...

CVE-2020-21806

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...

CVE-2020-21806

The collected documents confirm a concrete vulnerability: CVE-2020-21806 affects ECTouch v2, with a SQL Injection on the shop page (index.php). The root cause cited in CNNVD-202107-2173 and related entries is failure to filter special characters in input, enabling an attacker to execute arbitrary...

CVE-2020-21806

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...

CVE-2020-21806: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...

PT-2021-10667

Name of the Vulnerable Software and Affected Versions: ECTouch version v2 Description: The issue is related to a SQL injection vulnerability in the shop page of index.php. This vulnerability can be exploited via the shop page in index.php. Recommendations: For ECTouch version v2, consider...

CVE-2020-18013: Improper Neutralization of Special Elements used in an SQL Command

SQL Injextion vulnerability exists in Whatsns 4.0 via the ip parameter in index.php?adminbanned/add.htm...

PT-2021-10116

Name of the Vulnerable Software and Affected Versions: Whatsns version 4.0 Description: A SQL Injection issue exists, allowing potential exploitation via the ip parameter in the "index.php?admin banned/add.htm" endpoint. Recommendations: For Whatsns version 4.0, consider restricting access to the...

KevinLAB BEMS 1.0 Authenticated File Path Traversal / Information Disclosure

KevinLAB BEMS 1.0 Authenticated File Path Traversal Information Disclosure Vendor: KevinLAB Inc. Product web page: http://www.kevinlab.com Affected version: 4ST L-BEMS 1.0.0 Building Energy Management System Summary: KevinLab is a venture company specialized in IoT, Big Data, A.I based energy...