CVE-2010-0862

The CVE-2010-0862 entry concerns Oracle Industry Product Suite 13.1, specifically the Retail - Oracle Retail Markdown Optimization component. It describes an unspecified vulnerability that could allow remote attackers to affect integrity via unknown vectors related to Online Help. The threat cont...

CVE-2010-0863

CVE-2010-0863 concerns an unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component of Oracle Industry Product Suite 12.2. The available documents identify the affected product/component and indicate the issue could affect integrity via unknown vectors related to Online Hel...

CVE-2010-0862

Unspecified vulnerability in the Retail - Oracle Retail Markdown Optimization component in Oracle Industry Product Suite 13.1 allows remote attackers to affect integrity via unknown vectors related to Online Help...

CVE-2010-0864

Unspecified vulnerability in the Retail - Oracle Retail Place In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help...

CVE-2010-0863

Unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help...

JQL breaks issue security levels based on custom fields

The MultiSelectCustomFieldIndexer does 2 things: index but don't store a case-folded version in the field "customfield10017:retail" store a "raw" version in a new field with the raw added to the end "customfield10017raw:Retail" The problem is that com.atlassian.jira.security.type.GroupCF looks fo...

JAHx101 - Huski retail mulitple SQL injection vulnerabilities

-------------------------------------------------------------------------------------------- 20100205 - Justanotherhacker.com : Huski retail mulitple SQL injection vulnerabilities JAHx101 - http://www.justanotherhacker.com/advisories/JAHx101.txt...

ASCET Interactive Huski Retail - Multiple SQL Injections

ASCET Interactive Huski Retail - Multiple SQL Injections source: https://www.securityfocus.com/bid/38129/info Huski Retail is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

ASCET Interactive Huski Retail - Multiple SQL Injections

source: https://www.securityfocus.com/bid/38129/info Huski Retail is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access ...

Huski Retail SQL Injection

-------------------------------------------------------------------------------------------- 20100205 - Justanotherhacker.com : Huski retail mulitple SQL injection vulnerabilities JAHx101 - http://www.justanotherhacker.com/advisories/JAHx101.txt...

CVE-2000-0135

CVE-2000-0135 affects the @Retail shopping cart application. NVD notes remote attackers can modify sensitive purchase information via hidden form fields, with a CVSS v2 base score of 7.5 (NETWORK, LOW complexity, NONE auth, partial impact across confidentiality, integrity, and availability). Conn...

CVE-2000-0135

The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0135

The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

PT-2000-1121 · Atretail · Atretail

Name of the Vulnerable Software and Affected Versions: Retail shopping cart application affected versions not specified Description: The issue allows remote users to modify sensitive purchase information via hidden form fields in the shopping cart application. Recommendations: At the moment, ther...