26 matches found
CVE-2022-0472
Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9...
EUVD-2022-0844
Malicious code in bioql PyPI...
laracom Cross-site Scripting
laracom aka Laravel FREE E-Commerce Software 1.4.11 has a Cross-site Scripting vulnerability via search query...
GHSA-QC2P-6QRF-25J2 laracom Cross-site Scripting
laracom aka Laravel FREE E-Commerce Software 1.4.11 has a Cross-site Scripting vulnerability via search query...
Unrestricted Upload of File with Dangerous Type in jsdecena/laracom
jsdecena/laracom prior to version 2.0.9 is vulnerable to Unrestricted Upload of File with Dangerous Type...
GHSA-5Q5W-MQP6-G2GH Unrestricted Upload of File with Dangerous Type in jsdecena/laracom
jsdecena/laracom prior to version 2.0.9 is vulnerable to Unrestricted Upload of File with Dangerous Type...
CVE-2022-0472
Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9...
CVE-2022-0472
Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9...
Unrestricted file upload
Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9...
CVE-2022-0472
Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9...
CVE-2022-0472 Unrestricted Upload of File with Dangerous Type in jsdecena/laracom
Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9...
CVE-2022-0472 Unrestricted Upload of File with Dangerous Type in jsdecena/laracom
Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9...
CVE-2022-0472
CVE-2022-0472 affects the Packagist package jsdecena/laracom prior to version 2.0.9. The root cause is an Unrestricted Upload of File with Dangerous Type , enabling an attacker with a valid account (per the Huntr PoC) to upload files such as HTML that can contain scripts. This can lead to content...
CVE-2022-0472: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9...
PT-2022-13197
Name of the Vulnerable Software and Affected Versions jsdecena/laracom versions prior to 2.0.9 Description The issue concerns an unrestricted upload of files with dangerous types. This could potentially allow attackers to upload malicious files, posing a security risk. Recommendations For version...
laracom 代码问题漏洞
laracom is a free Laravel e-commerce software package. A code issue vulnerability exists in laracom, which stems from an unrestricted upload of a file of a dangerous type in Packagist jsdecena/laracom before v2.0.9...
in jsdecena/laracom
Description Hi there, I would like to report a vulnerability that allows a hacker to upload dangerous file type in jsdecena/laracom. Attacker must have an account with permission to Edit Product E.g. Clerk role. Then, he can upload malcious file with extensions such as html, svg,... which leads t...
Laracom Cross-Site Scripting Vulnerability
laracom is a free Laravel e-commerce software. A cross-site scripting vulnerability exists in laracom version 1.4.11, which can be exploited by an attacker to execute client-side code...
Cross-Site Scripting (XSS)
laracom is vulnerable to cross-site scripting XSS attacks. A remote attacker could trick a user into browsing to a URL which would trigger the XSS on the search form and steal the user's cookie or capture keyboard strokes and eventually take over the user account...