CVE-2022-35154

Shopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value parameter...

PT-2022-22604 · Unknown · Shopro Mall System

Name of the Vulnerable Software and Affected Versions: Shopro Mall System version 1.3.8 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the value parameter. Recommendations: For Shopro Mall System version 1.3.8, consider restricting acce...

Shopro Mall System SQL注入漏洞

XPTECH Shopro Mall System is a mall management system from China's XPTECH company. A security vulnerability exists in Shopro Mall System v1.3.8, which originates from the discovery of a SQL injection vulnerability via the value parameter...

CVE-2022-30113

Electronic mall system 1.0build20200203 is affected vulnerable to SQL Injection...

CVE-2022-30113

Electronic mall system 1.0build20200203 is affected vulnerable to SQL Injection...

CVE-2022-30113

Electronic mall system 1.0build20200203 is affected vulnerable to SQL Injection...

Sql injection

Electronic mall system 1.0build20200203 is affected vulnerable to SQL Injection...

CVE-2022-30113

Electronic mall system 1.0build20200203 is affected vulnerable to SQL Injection...

CVE-2022-30113

The CVE-2022-30113 entry concerns the Electronic mall system 1.0_build20200203, which is affected by a SQL Injection vulnerability. Public summaries in connected documents consistently identify the affected product/version and the vulnerability type, with an accompanying high-severity CVSS v3.1 s...

Electron SQL注入漏洞

Electron is a personal developer of a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium and can be used to write cross-platform desktop applications using HTML, CSS. A security vulnerability exists in Electronic mall system versio...

Command Execution Vulnerability in WoSmart Top Shop Mall System

Zhejiang WoSmith Information Technology Co., Ltd. is a technology company specializing in mobile Internet technology development. There is a command execution vulnerability in WoSmith's list store mall system, which can be exploited by an attacker to gain control of the server...

CVE-2022-27476

A cross-site scripting XSS vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter...

CVE-2022-27477

Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit...

CVE-2022-27477

Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit...

CVE-2022-27476

A cross-site scripting XSS vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter...

CVE-2022-27477

Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit...

CVE-2022-27476

A cross-site scripting XSS vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter...

Cross site scripting

A cross-site scripting XSS vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter...

CVE-2022-27477

Newbee-Mall v1.0.0 contains an arbitrary file upload vulnerability in the Upload function at /admin/goods/edit. The issue allows uploading arbitrary files, with the CVSS metrics showing high severity (CRITICAL in CVSS 3.1) and partial confidentiality/Integrity/Availability impacts. The provided c...

CVE-2022-27477

Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit...