1890 matches found
CVE-2022-4961 Weitong Mall OrderDao.xml sql injection
A vulnerability was found in Weitong Mall 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file platform-shop\src\main\resources\com\platform\dao\OrderDao.xml. The manipulation of the argument sidx/order leads to sql injection. The...
CVE-2022-4961 Weitong Mall OrderDao.xml sql injection
A vulnerability was found in Weitong Mall 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file platform-shop\src\main\resources\com\platform\dao\OrderDao.xml. The manipulation of the argument sidx/order leads to sql injection. The...
CVE-2022-4961
CVE-2022-4961 affects Weitong Mall 1.0.0, where the OrderDao.xml file (platform-shop\src\main\resources\com\platform\dao\OrderDao.xml) is vulnerable to SQL injection via the sidx/order parameter. Descriptions from connected sources confirm a critical issue with this specific file/functionality, b...
Weitong Mall SQL Injection Vulnerability
Weitong Mall is a shopping mall system developed by fuyanglipengjun. A SQL injection vulnerability exists in Weitong Mall version 1.0.0, which originates from platform-shopsrcmain. The vulnerability is caused by an unknown function in platform-shopsrcmain.esourcescomplatformdaoOrderDao.xml, which...
Honor VMALL Security Vulnerability
Honor VMALL is the Honor Mall application from Honor, a Chinese company. A security vulnerability exists in Honor VMALL, which stems from an information disclosure vulnerability, successful exploitation of which may result in information disclosure...
ECShop SQL Injection Vulnerability
ShopeX ECShop is an open source mall system of the Chinese business school ShopeX company . Support PC + H5 + APP + small program mall , source code free download experience , suitable for enterprise development and build mall. ECShop 4.1.1 version of the existence of SQL injection vulnerability ...
LaikeTui 代码问题漏洞
LaikeTui Laike e-commerce is a stable and small open source mall system for individual developers. Bettershop LaikeTui code problem vulnerability , the vulnerability stems from the component POST Request Handler in the index.php?module=api&action=user&m=upload there are some unknown functions ,...
OPPO OnePlus Mall Security Breach
OPPO OnePlus Mall is a mobile application from OPPO Guangdong Mobile Communications OPPO, China. A security vulnerability exists in OPPO OnePlus Mall version 3.0.2023, which stems from a remote code execution RCE vulnerability in the webview component...
ShopeX ECShop Authorization Issues Vulnerability
ShopeX ECShop is an open source mall system of the Chinese business school ShopeX company . Support PC + H5 + APP + small program mall , source code free download experience , suitable for enterprise development and build mall. ECShop v4.1.16 version of a security vulnerability , the vulnerabilit...
columbusautomall.com Cross Site Scripting vulnerability OBB-3565296
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
mall.ccworld.net Cross Site Scripting vulnerability OBB-3550566
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
EasyAdmin8 代码问题漏洞
EasyAdmin8 is a server administration suite for Blumlaut individual developers. A code issue vulnerability exists in EasyAdmin8 version 2.0.2.2, which stems from the fact that the file /admin/index/index.html/admin/mall.goods/index.html causes unrestricted uploads...
PT-2023-26244 · Unknown · Easyadmin8
Name of the Vulnerable Software and Affected Versions: EasyAdmin8 version 2.0.2.2 Description: A vulnerability has been found in the File Upload Module of EasyAdmin8, affecting an unknown function of the file /admin/index/index.html/admin/mall.goods/index.html. This issue leads to unrestricted...
beauty.pro-mall.com Cross Site Scripting vulnerability OBB-3459262
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PHP Mall 5.0 Cross Site Scripting
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
mall.duranno.com Cross Site Scripting vulnerability OBB-3374741
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-30216
Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information...
CVE-2023-30216
Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information...
kingswaymall.com Cross Site Scripting vulnerability OBB-3292980
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...