CVE-2017-10329

CVE-2017-10329 affects Oracle E-Business Suite, specifically the Global Order Promising component’s Reschedule Sales Orders. Affected versions are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. The vulnerability allows an unauthenticated, network-accessible attacker (HTTP) to ...

CVE-2017-10329

Vulnerability in the Oracle Global Order Promising component of Oracle E-Business Suite subcomponent: Reschedule Sales Orders. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attack...

Unspecified Vulnerability in Oracle Global Order Promising

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. An unspecified vulnerability exists in the Reschedule...

Cross site scripting

Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to provoke persistent execution in the...

CVE-2017-15374

Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to provoke persistent execution in the...

CVE-2017-15374

Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to provoke persistent execution in the...

CVE-2017-15374

Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to provoke persistent execution in the...

ShopsN 2.2.1 SQL Injection Vulnerability in frontend restore_order method

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd, an open source online store in line with enterprise-class commercial standards of the whole network system. ShopsN 2.2.1 official version of the foreground restoreorder method SQL injection...

SQL Injection Vulnerability in get_total_money_order Method of WKshop General Mall System

WK+shop is a mall system based on the technology of PHP+MySQL, developed using ThinkPHP5.0 framework, which combines the Witcott mission system with multiple mall systems. A SQL injection vulnerability exists in the gettotalmoneyorder method of the WK+shop universal mall system, which allows an...

U.S. Top Law Enforcement Call Strong Encryption a ‘Serious Problem’

BOSTON—Top U.S. law enforcement and policy makers touched the third-rail issue of encryption Wednesday with several high-ranking officials lamenting their inability to crack open phones, laptops and communications protected with strong encryption. U.S. Deputy Attorney General Rod Rosenstein made...

PHPSHE open source mall system order.php page exists out of rights access vulnerability

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE open source mall system order.php page ther...

Threat Outbreak Alert RuleID30773: Email Messages Distributing Malicious Software on September 28, 2017

Medium Alert ID: 55407 First Published: 2017 September 28 18:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30773 may contain the following files: Name ...

Threat Outbreak Alert RuleID30590: Email Messages Distributing Malicious Software on September 27, 2017

Medium Alert ID: 55391 First Published: 2017 September 27 17:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30590 may contain the following files: Name ...

ASP4CMS AspCMS Information Disclosure Vulnerability

ASP4CMS AspCMS is China's ASP4CMS open source laboratory of a free enterprise website construction system . The system supports customized templates and plug-in extensions and other features. ASP4CMS AspCMS 2.7.2 version of the member/Orderinfo.asp file has a security vulnerability. A remote...

CVE-2017-14653

member/Orderinfo.asp in ASP4CMS AspCMS 2.7.2 allows remote authenticated users to read arbitrary order information via a modified OrderNo parameter...

Information disclosure

member/Orderinfo.asp in ASP4CMS AspCMS 2.7.2 allows remote authenticated users to read arbitrary order information via a modified OrderNo parameter...

CVE-2017-14653

member/Orderinfo.asp in ASP4CMS AspCMS 2.7.2 allows remote authenticated users to read arbitrary order information via a modified OrderNo parameter...

Threat Outbreak Alert RuleID30686: Email Messages Distributing Malicious Software on September 20, 2017

Medium Alert ID: 55350 First Published: 2017 September 20 17:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30686 may contain the following files: Name ...

Cross site scripting

Cross-site scripting XSS vulnerability in the Floating Social Bar plugin before 1.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to original service order...

CVE-2015-3299

Cross-site scripting XSS vulnerability in the Floating Social Bar plugin before 1.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to original service order...