SQL Injection Vulnerability in DSmall Multi-User Mall System

DSmall multi-user mall system is a platform mall system developed by DSmall Network for enterprise-level customers with multiple suppliers and stores, which can realize the modes of platform self-owned and third-party merchants at the same time. There is a SQL injection vulnerability in DSmall...

Tpshop Mall Member Center Multiple SQL Injection Vulnerabilities

TPshop open source mall system Thinkphp shop for short , is a set of Shenzhen Soleil Networks Ltd. developed a set of multi- merchant model of the mall system . Tpshop mall member center in many places there are SQL injection vulnerabilities. Attackers can use the vulnerability to obtain sensitiv...

NiuShop open source mall system Goods.php page SQL injection vulnerability

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NiuShop open source mall system Goods.php page SQL injection vulnerability , attackers can exploit the...

TPshop 前台SQL注入#2

0x01 说明 TPshop开源商城系统 Thinkphp shop的简称 ，是深圳搜豹网络有限公司开发的一套多商家模式的商城系统。适合企业及个人快速构建个性化网上商城。包含PC+IOS客户端+Adroid客户端+微商城，系统PC+后台是基于ThinkPHP5 MVC构架开发的跨平台开源软件，设计得非常灵活，具有模块化架构体系和丰富的功能，易于与第三方应用系统无缝集成，在设计上，包含相当全面，以模块化架构体系，让应用组合变得相当灵活，功能也相当丰富。 下载地址：http://www.tp-shop.cn/Index/Index/download.html 目录大概结构 ├─index.p...

TPshop Mall System v2.0.5 File Upload Vulnerability

TPshop is developed with thinkphp shop a free open source online store system. TPshop mall system v2.0.5 file upload vulnerability, attackers can exploit the vulnerability to upload any file...

pttime.mall.bizfree.kr XSS vulnerability

Vulnerable URL: http://pttime.mall.bizfree.kr/shopuser/goods/bigImage.html?img=xss%22%20onerror=prompt%27openbugbounty%27%20%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

File Containment Vulnerability in iWebShop Open Source Mall System

iWebShop is an open source WEB e-commerce B2B2C platform self-supporting + merchants stationed station-building system based on PHP language + MYSQL database development, using the MVC architecture Yii framework thinking design pattern carefully designed a product. iWebShop open source mall syste...

SQL Injection Vulnerability in get_total_money_order Method of WKshop General Mall System

WK+shop is a mall system based on the technology of PHP+MySQL, developed using ThinkPHP5.0 framework, which combines the Witcott mission system with multiple mall systems. A SQL injection vulnerability exists in the gettotalmoneyorder method of the WK+shop universal mall system, which allows an...

Tinkerbell Mall app has a logic design flaw at the verification code

Tinker Mall app is a mobile app for trading time and skills. A logic design vulnerability exists at the Tinkerbell Mall app verification code. An attacker can register an arbitrary account by exploiting the vulnerability...

PHPSHE open source mall system order.php page exists out of rights access vulnerability

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE open source mall system order.php page ther...

SQL Injection Vulnerability in check_need_status, check_pay_sum Methods of WK+shop General Mall System

WK+shop is a mall system based on the technology of PHP+MySQL, developed using ThinkPHP5.0 framework, which combines the Witcott mission system with multiple mall systems. WK+shop general mall system checkneedstatus, checkpaysum method SQL injection vulnerability, attackers can construct a specif...

SQL Injection Vulnerability in WK+shop General Mall System

WK+shop is a mall system based on the technology of PHP+MySQL, developed using ThinkPHP5.0 framework, which combines the Witcott mission system with multiple mall systems. WK+shop General Mall System suffers from a SQL injection vulnerability, which allows an attacker to obtain sensitive database...

WK+shop mall system has arbitrary file deletion vulnerability

WK+shop is a mall system based on the technology of PHP+MySQL, developed using ThinkPHP5.0 framework, which combines the Witcott mission system with multiple mall systems. WK+shop Universal Mall System has an arbitrary file deletion vulnerability, an attacker can delete arbitrary files on disk by...

SQL injection vulnerability in the background management system of the small program of Five Grams Mall

Five grams of mall small program background management system is a PHP development with background WeChat mall small program source code. Five grams mall applet background management system SQL injection vulnerability, the vulnerability is due to the system fails to user-submitted data for...

Mai Dot Mall App has SMS Bombing Vulnerability

MacDot Mall APP is an online shopping software. There is a SMS bombing vulnerability in MaiDot Mall APP. The attacker consumes server resources and causes denial of service by sending unlimited CAPTCHAs to cell phones...

Bonanza Mall App Registry has SMS Bombing Double Verification Vulnerability

Bonanza Mall APP is a shopping software. There is an SMS bombing double verification vulnerability in the registration of Bonong Mall APP. An attacker can exploit this vulnerability to replay packets sending verification codes without restriction and bombard the client with SMS messages...

SQL injection vulnerability in Nlist.aspx and Mall_Teacher.aspx pages of Xinqi Online Learning System.

Xinqi Online Learning System is an online learning platform system that can make learning plans, realize supervision and monitoring, and assist learning. A SQL injection vulnerability exists in the Nlist.aspx and MallTeacher.aspx pages of Xinqi Online Learning System. An attacker can use this...

PHPSHE open source mall system class_id parameter SQL injection vulnerabilities exist

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE open source mall system classid parameter S...

PHPSHE open source mall system bankname parameter SQL injection vulnerability

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE open source mall system bankname parameters...

SQL Injection Vulnerability in list.act.php in mall_order directory of DuoDuoRebate.com System_V8.3

DuoDuo rebate system is for e-commerce rebate, shopping guide to provide solutions, is the open source PHP rebate site system. DuoDuo rebate systemV8.3 mallorder directory list.act.php SQL injection vulnerability. The vulnerability is due to the system status parameter does not filter the data...