CVE-2022-30395

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deletecart...

CVE-2022-30384

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deleteinventory...

Friday Squid Blogging: Squid Facts on Your Phone

Text "SQUID" to 1-833-SCI-TEXT for daily squid facts. The website has merch. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered...

CVE-2024-5766 Likeshop Merchandise admin cross site scripting

A vulnerability was found in Likeshop up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /admin of the component Merchandise Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-267449 was...

CVE-2024-5766 Likeshop Merchandise admin cross site scripting

A vulnerability was found in Likeshop up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /admin of the component Merchandise Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-267449 was...

CVE-2024-5766

CVE-2024-5766 is an XSS vulnerability in Likeshop up to version 2.5.7, tied to the Merchandise Handler component’s /admin handling. The issue arises from how /admin is processed, enabling cross-site scripting that can be triggered remotely. Affected product/version: Likeshop

Likeshop Cross-Site Scripting Vulnerability

Likeshop is a complete solution for social commerce strategies from Likeshop Open Source. A cross-site scripting vulnerability exists in Likeshop 2.5.7 and prior versions, which stems from /admin in the component Merchandise Handler containing some unknown handling, resulting in a cross-site...

PT-2024-37133 · Likeshop · Likeshop

Name of the Vulnerable Software and Affected Versions: Likeshop versions up to 2.5.7 Description: A vulnerability was found in the Merchandise Handler component, affecting some unknown processing of the file /admin. This issue leads to cross-site scripting and can be initiated remotely...

Samsung Exynos 安全漏洞

SAMSUNG Exynos is a SoC, Arm architecture-based processor developed and manufactured by Samsung Mobile, a South Korean company. A security vulnerability exists in Samsung Exynos1380, Exynos1330, Exynos2400, which stems from a possible reconfiguration of the OTP allows a local attacker to switch R...

PT-2024-18728 · Samsung · Samsung Mobile Devices

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Devices affected versions not specified Description: A vulnerability allows local attackers to reconfigure OTP, enabling them to transit into RMA mode, which disables security features. This attack requires additional privilege...

promotional-merchandise.org.uk Cross Site Scripting vulnerability OBB-3883109

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-24548

Payment EX Ver1.1.5b and earlier allows a remote unauthenticated attacker to obtain the information of the user who purchases merchandise using Payment EX...

JVN#41129639: Payment EX vulnerable to information disclosure

Payment EX provided by Simplesite contains an information disclosure vulnerability CWE-200. Impact A remote unauthenticated attacker may obtain the information of the user who purchases merchandise using Payment EX. Solution Update the Software Update the software to the latest version according ...

merchandise-shop.hu Cross Site Scripting vulnerability OBB-3629856

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-42237

A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account...

CVE-2022-42237

A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account...

PT-2022-26325 · Unknown · Merchandise Online Store

Name of the Vulnerable Software and Affected Versions: Merchandise Online Store version 1.0 Description: A SQL Injection issue allows an attacker to log in to the admin account. Recommendations: For Merchandise Online Store version 1.0, consider temporarily restricting access to the admin login...

CVE-2022-42237

CVE-2022-42237 affects Merchandise Online Store v1.0, exposing an SQL Injection in the login/auth workflow that can allow an attacker to log in to an admin account. The vulnerability is classified as CRITICAL (CVSS 3.1: 9.8) with network attack vector, no privileges, and no user interaction requi...

CVE-2022-42237

A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a Merchandise Online Store system by Carlo Montero Personal Developer. A security vulnerability exists in Merchandise Online Store v.1.0, which can be exploited by an attacker to log into an administrator account using SQL injection...