1912 matches found
Sql injection
Shopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value parameter...
CVE-2022-35154
Shopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value parameter...
CVE-2022-35154
Shopro Mall System v1.3.8 is affected by a SQL injection vulnerability exposed via the value parameter. The issue is confirmed across multiple sources and is rated CVSS v3.1 base score 9.8 (CRITICAL) with NETWORK attack vector, no authentication, and requires no user interaction. The root cause i...
PT-2022-22604 · Unknown · Shopro Mall System
Name of the Vulnerable Software and Affected Versions: Shopro Mall System version 1.3.8 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the value parameter. Recommendations: For Shopro Mall System version 1.3.8, consider restricting acce...
Shopro Mall System SQL注入漏洞
XPTECH Shopro Mall System is a mall management system from China's XPTECH company. A security vulnerability exists in Shopro Mall System v1.3.8, which originates from the discovery of a SQL injection vulnerability via the value parameter...
CVE-2022-30113
Electronic mall system 1.0build20200203 is affected vulnerable to SQL Injection...
CVE-2022-30113
Electronic mall system 1.0build20200203 is affected vulnerable to SQL Injection...
CVE-2022-30113
Electronic mall system 1.0build20200203 is affected vulnerable to SQL Injection...
Sql injection
Electronic mall system 1.0build20200203 is affected vulnerable to SQL Injection...
CVE-2022-30113
The CVE-2022-30113 entry concerns the Electronic mall system 1.0_build20200203, which is affected by a SQL Injection vulnerability. Public summaries in connected documents consistently identify the affected product/version and the vulnerability type, with an accompanying high-severity CVSS v3.1 s...
CVE-2022-30113
Electronic mall system 1.0build20200203 is affected vulnerable to SQL Injection...
Electron SQL注入漏洞
Electron is a personal developer of a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium and can be used to write cross-platform desktop applications using HTML, CSS. A security vulnerability exists in Electronic mall system versio...
Command Execution Vulnerability in WoSmart Top Shop Mall System
Zhejiang WoSmith Information Technology Co., Ltd. is a technology company specializing in mobile Internet technology development. There is a command execution vulnerability in WoSmith's list store mall system, which can be exploited by an attacker to gain control of the server...
CVE-2022-27476
A cross-site scripting XSS vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter...
CVE-2022-27476
A cross-site scripting XSS vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter...
CVE-2022-27477
Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit...
CVE-2022-27476
A cross-site scripting XSS vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter...
CVE-2022-27477
Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit...
CVE-2022-27477
Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit...
Cross site scripting
A cross-site scripting XSS vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter...