CVE-2023-30216

Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information...

CVE-2023-30216

The CVE-2023-30216 entry affects the open-source e-commerce system newbee-mall prior to commit 1f2c2dfy, where the updateUserInfo function has insecure permissions. This configuration flaw allows attackers to obtain user account information, as described across multiple sources. Root cause: impro...

newbee-mall 安全漏洞

newbee-mall is an e-commerce system. A security vulnerability exists in previous versions of newbee-mall 1f2c2dfy, which stems from an insecure privilege setting in the updateUserInfo function and can be exploited by an attacker to obtain user account information...

PT-2023-22592 · Unknown · Newbee-Mall

Name of the Vulnerable Software and Affected Versions: newbee-mall versions prior to commit 1f2c2dfy Description: The issue is related to insecure permissions in the updateUserInfo function, which allows attackers to obtain user account information. Recommendations: For versions prior to commit...

mall.51.ca Cross Site Scripting vulnerability OBB-3226882

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-26912

Cross site scripting XSS vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button...

CVE-2023-26912

Cross site scripting XSS vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button...

Cross site scripting

Cross site scripting XSS vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button...

CVE-2023-26912

CVE-2023-26912 describes a Cross-Site Scripting (XSS) vulnerability in xenv S-mall-ssm, triggered through the evaluate button after the commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 (Feb 17, 2020). The connected documents consistently identify the affected component as xenv S-mall-ssm , with th...

CVE-2023-26912

Cross site scripting XSS vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button...

CVE-2023-26912

Cross site scripting XSS vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button...

xenv S-mall-ssm 跨站脚本漏洞

S-mall-ssm Small Mall System is a mall system by the China Not So Empty xenv individual developer. A security vulnerability exists in xenv S-mall-ssm, which originated from a vulnerability that allows a local attacker to execute arbitrary code via the evaluate button...

SUL1SS shop SQL注入漏洞

SUL1SS shop is a multi-merchant mall application from the SUL1SS individual developer. SUL1SS shop suffers from a SQL injection vulnerability that stems from a misuse of the keyword parameter resulting in sql injection...

mall-info.com Cross Site Scripting vulnerability OBB-3208823

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mall-info.com Cross Site Scripting vulnerability OBB-3113957

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-35154

Shopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value parameter...

CVE-2022-35154

Shopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value parameter...

CVE-2022-35154

Shopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value parameter...

Sql injection

Shopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value parameter...

CVE-2022-35154

Shopro Mall System v1.3.8 is affected by a SQL injection vulnerability exposed via the value parameter. The issue is confirmed across multiple sources and is rated CVSS v3.1 base score 9.8 (CRITICAL) with NETWORK attack vector, no authentication, and requires no user interaction. The root cause i...