4 matches found
CVE-2021-39475
CVE-2021-39475 管理后台评论页面上的XSS漏洞 https://www.warcloudsecurity.com/ecommerce/admin/reviews.php?action=preview&rID=1&page=0...
Vacation Rental 1.8 - Stored Cross-Site Scripting (XSS)
Exploit Title: Vacation Rental 1.8 - Stored Cross-Site Scripting XSS Date: 30/06/2023 Exploit Author: CraCkEr Vendor: GZ Scripts Vendor Homepage: https://gzscripts.com/ Software Link: https://gzscripts.com/vacation-rental-website.html Version: 1.8 Tested on: Windows 10 Pro Impact: Manipulate the...
Active Price Comparison v 4 (ProductID) Blind SQL Injection Vulnerability
No description provided by source. ----------------------------بسم الله الرØÙ…Ù† الرØÙŠÙ…------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: Ñ3d D3v!L Date:...
osCommerce 2.2 - '/admin/reviews.php?page' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...