1912 matches found
CVE-2019-7554
The vulnerability CVE-2019-7554 affects PHP Scripts Mall API Based Travel Booking 3.4.7. It is a reflected cross-site scripting (XSS) flaw exploitable via the flight-results.php d2 parameter, which can cause client-side script execution. The issue stems from input reflected back to the user; expl...
CVE-2019-7553
PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has Stored XSS in the Profile Update page via the My Name field...
CVE-2019-7553
CVE-2019-7553 affects PHP Scripts Mall Chartered Accountant: Auditor Website version 2.0.1, with a Stored XSS in the Profile Update page via the My Name field. Several sources (Red Hat advisory, CNVD, CVE listings, and PT-2019-18644) confirm the vulnerability type as stored XSS and point to the s...
Code Execution Vulnerability in ShopsN Single Merchant b2c Mall System
ShopsN single merchant b2c mall system is an open source online store system developed using PHP + MySQL. ShopsN single merchant b2c mall system suffers from a code execution vulnerability that can be exploited by attackers to gain control of the web server...
TPshop open source mall system there are directory traversal vulnerabilities
TPshop open source mall system , is a set of Shenzhen SoBao Networks Ltd. developed a set of multi-merchant model of the mall system . TPshop open source mall system there is a directory traversal vulnerability , attackers can use this vulnerability to obtain sensitive information...
Logic Flaw Vulnerability in Daishantron Mall System
Shanghai Shangchuang Network Technology Co., Ltd. is an independent e-commerce service and technology provider with development strength. There is a logic flaw vulnerability in the Dascommerce Mall system, which can be exploited by attackers to obtain sensitive information...
TPshopv2.0.0 open source mall system command execution vulnerability
Ltd. is a professional research and development of e-commerce software as the main business of the group of companies, set sales, marketing, product development, technical support, product implementation, after-sales service and many other functions in one of the professional enterprise managemen...
SQL Injection Vulnerability in PHPSHE Mall System (CNVD-2019-15927)
PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE Mall System suffers from a SQL injection...
NiuShop B2C Single Merchant Mall System Up***.php file has arbitrary file deletion vulnerability
NiuShop B2C single merchant mall system is a PHP open source e-commerce system designed and developed completely independently by Shanxi NiuKu Information Technology Co. NiuShop B2C single merchant mall system Up.php file arbitrary file deletion vulnerability. Attackers can construct packets sent...
Business Wings PC Mall website has xss vulnerability
hereinafter referred to as "Business Wings" is a company that specializes in the research and development of intelligent new retail e-commerce ecosystem and services. An xss vulnerability exists in the Wings of Commerce PC Mall website. The vulnerability stems from the failure to filter illegal...
SQL Injection Vulnerability in PHPSHE Mall System v1.7
PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE Mall System v1.7 suffers from a SQL injecti...
PHPSHE Mall System has XML External Entity Injection Vulnerability
PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE mall system exists XML external entity...
DSMALL open source mall B2B2C Fl***.php page there are SQL injection vulnerabilities
DSMALL open source mall B2B2C is a set of B2B2C multi-store mall solutions. DSMALL open source mall B2B2C Fl.php page there is a SQL injection vulnerability , an attacker can exploit the vulnerability to obtain sensitive database information...
PHP Scripts Mall Amazon Affiliate Store Input Validation Error Vulnerability
PHP Scripts Mall Amazon Affiliate Store is an online e-store system by PHP Scripts Mall India. An input validation error vulnerability exists in PHP Scripts Mall Amazon Affiliate Store version 2.1.6, which can be exploited by attackers to tamper with payment amounts...
CVE-2019-9605
PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting XSS via the err value in a .ico picture upload...
Cross site scripting
PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting XSS via the err value in a .ico picture upload...
Cross site request forgery (csrf)
PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Cross-Site Request Forgery CSRF for Edit Profile actions...
CVE-2019-9604
The CVE-2019-9604 entry concerns PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0, with a Cross-Site Request Forgery (CSRF) vulnerability affecting Edit Profile actions. The initial description specifies CSRF as the issue, and the connected records reaffirm the same vulnerability detail...
