Lucene search
K

7 matches found

OSV
OSV
added 2023/09/30 10:15 p.m.0 views

CVE-2023-43722

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "ordersstatusgroupsname1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS5.9AI score0.00117EPSS
Exploits1References2
OSV
OSV
added 2023/09/30 10:15 p.m.1 views

CVE-2023-43725

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "ordersproductsstatusnamelong1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS6AI score
Exploits0References2
OSV
OSV
added 2023/09/30 10:15 p.m.1 views

CVE-2023-43723

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "ordersstatusname1" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

5.4CVSS6AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/09/30 12:0 a.m.2 views

PT-2023-28945 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the orders products status name long1 parameter. This could potentially lead to...

5.4CVSS5.2AI score0.00117EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2023/09/30 12:0 a.m.1 views

PT-2023-28942 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: Os Commerce affected versions not specified Description: The issue is a Cross-Site Scripting XSS vulnerability that allows attackers to inject JavaScript through the orders status groups name1 parameter. This could potentially lead to...

5.4CVSS5.3AI score0.00117EPSS
Exploits1References8
Patchstack
Patchstack
added 2022/03/10 12:0 a.m.12 views

WordPress WooCommerce plugin <= 6.3.0 - Orders Status Change (via PayPal Standard Gateway) vulnerability

Orders Status Change via PayPal Standard Gateway vulnerability discovered in WordPress WooCommerce plugin versions = 6.3.0. Solution Update the WordPress WooCommerce plugin to the latest available version at least 6.3.1...

4.1AI score
Exploits0References2Affected Software1
Packet Storm
Packet Storm
added 2016/04/18 12:0 a.m.151 views

modified eCommerce 2.0.0.0 Rev 9678 SQL Injection

Title: Blind Injection modified eCommerce 2.0.0.0 rev 9678 Date: 16.04.2016 Category: webapps Vendor Homepage: http://www.modified-shop.org/download Software Link: http://www.modified-shop.org/forum/index.php?action=downloads;sa=downfile&id=96 Version: 2.0.0.0 rev 9678 Tested on: Apache/2.4.7, PH...

0.3AI score0.01178EPSS
Exploits5
Rows per page
Query Builder