mall.ccworld.net Cross Site Scripting vulnerability OBB-3550566

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SDCMS has an information leakage vulnerability

SDCMS is a B2C mall website management system independently developed by Vivid Network, PHP four-in-one website management system. SDCMS has an information leakage vulnerability, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in HongYuJD

HongYuJD is a mall website system of HongYu technology team. HongYuJD suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Design/Logic Flaw

PHP Scripts Mall Website Seller Script 2.0.5 has XSS via a Profile field such as Company Address, a related issue to CVE-2018-15896...

CVE-2018-11501

PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via usersubmit.php?upd=2, with resultant XSS...