CVE-2023-37164

Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the catid parameter at /shop/?module=shop&action=search...

CVE-2023-37164

Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the catid parameter at /shop/?module=shop&action=search...

Diafan CMS 跨站脚本漏洞

Diafan CMS is a website builder from Diafan. It is used to create online stores. A cross-site scripting vulnerability exists in Diafan CMS v6.0, which originates from the lack of effective filtering and escaping of user-supplied data in the catid parameter of /shop/?module=shop&action=search, whi...

CVE-2021-21302

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Injection vulnerability possible by using shop search keywords via the admin panel. The problem is fixed in 1.7.7.2...

PT-2021-14401

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 1.7.2 PrestaShop versions prior to 1.7.7.2 are not necessary to be listed as the first range already includes them. Corrected version: PrestaShop versions prior to 1.7.2 Description: The issue is related to a CSV...

CVE-2021-21302: Improper Neutralization of Special Elements used in an OS Command

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Injection vulnerability possible by using shop search keywords via the admin panel. The problem is fixed in 1.7.7.2...

abahouse.co.jp XSS vulnerability

Vulnerable URL: http://abahouse.co.jp/english/shop-search/index.php?search==/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3Ecollex Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

mytrendyphone.es XSS vulnerability

Vulnerable URL: https://www.mytrendyphone.es/shop/search-1.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 198543 VIP website status:| No Check mytrendyphone.es SSL connection:...