125 matches found
Merchandise Online Store SQL Injection Vulnerability (CNVD-2022-40281)
Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers to conduct SQL injection via /vloggersmerch/classes/Master.php?f=deleteorder attack...
microweber 安全漏洞
Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. A logic flaw vulnerability exists in Microweber, which stems from an error in the business...
Microweber 跨站脚本漏洞
Microweber is an online store management system from the US Microweber community that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. Microweber has a cross-site scripting vulnerability, and no details of the vulnerability are available at this...
microweber 跨站脚本漏洞
Microweber is an online store management system from the US Microweber community that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. Microweber has a cross-site scripting vulnerability, and no details of the vulnerability are available at this...
SQL Injection Vulnerability in SEMCMS SCSHOP (CNVD-2021-38032)
SCSHOP is a self-developed open source online store btc system. SEMCMS SCSHOP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in SEMCMS SCSHOP (CNVD-2021-38033)
SCSHOP is a self-developed open source online store btc system. SEMCMS SCSHOP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in SEMCMS SCSHOP (CNVD-2021-38040)
SCSHOP is a self-developed open source online store btc system. SEMCMS SCSHOP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
PHPGurukul Online Book Store 代码问题漏洞
PHPGurukul Online Book Store is a PHP-based online bookstore website system. An arbitrary file upload vulnerability exists in adminadd.php in PHPGurukul Online Book Store v1.0. An attacker can exploit this vulnerability to achieve remote code execution...
Unauthorized Access Vulnerability in SEMCMS
SEMCMS is a self-developed open source online store btc system. SEMCMS has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...
Command Execution Vulnerability in Smart Store System
Smart Store System is a store management system tailor-made for retail stores by Kingdee Software. There is no need to buy a new machine, and the original cash register equipment can be adapted to the system, which can be used by multiple cash registers, cell phones and computers together to...
Sourcecodester SourceCodester Grocery Store Sales And Inventory System SQL注入漏洞
Sourcecodester SourceCodester Grocery Store Sales And Inventory System is a grocery store sales and inventory management system from SourceCodester USA. A SQL injection vulnerability exists in SourceCodester Grocery Store Sales And Inventory System version 1.0, which can be exploited by an attack...
Command Execution Vulnerability in ecshop
ecshop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store. The system is based on PHP language and MYSQL database structure development of cross-platform open source program. There is a command execution vulnerability in...
SQL Injection Vulnerability in Sh***.php, a Chain of Convenience Stores System of Sentosa Software
Shangtao software chain convenience store system is a new retail store management system developed by Guangzhou Shangtao Information Technology Company Limited, which integrates the functions of online ordering, self-checkout, supply chain, franchise management and distribution management. Sh.php...
File Upload Vulnerability in Liangjing Mall Online Shop Shopping System
Liangjing Mall online store shopping system is a set of multi-functional online store system that can fit different types of commodities, super flexible, three-tier distribution PC+mobile+micro-site, which provides a complete online store solution. A file upload vulnerability exists in Liangjing...
Online Store System Access Control Error Vulnerability
Online Store System is an e-commerce system. An Access Control Error vulnerability exists in Online Store System v1.0. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could exploit the vulnerability...
Online Store System Path Traversal Vulnerability
Online Store System is an e-commerce system. A path traversal vulnerability exists in the Online Store System v1.0 release. The vulnerability arises from a failure of a network system or product to properly filter special elements in the path of a resource or file. An attacker could use this...
Online Store System Cross-Site Scripting Vulnerability
Online Store System is an e-commerce system. A cross-site scripting vulnerability exists in Online Store System v1.0. The vulnerability stems from a lack of proper validation of client-side data in the web application. An attacker can exploit this vulnerability to execute client-side code...
Online Store System Cross-Site Scripting Vulnerability (CNVD-2019-40113)
Online Store System is an e-commerce system. A cross-site scripting vulnerability exists in Online Store System v1.0. The vulnerability stems from a lack of proper validation of client-side data in the web application. An attacker can exploit this vulnerability to execute client-side code...
Online Store System Cross-Site Scripting Vulnerability (CNVD-2019-40112)
Online Store System is an e-commerce system. A cross-site scripting vulnerability exists in Online Store System v1.0. The vulnerability stems from a lack of proper validation of client-side data in the web application. An attacker can exploit this vulnerability to execute client-side code...
