12115 matches found
Fake Antivirus Apps on Play Store Loaded with SharkBot Banking Trojan
By Deeba Ahmed The SharkBot trojan was found in four fake antivirus apps on Google Play Store collectively boasting 57,000 downloads.… This is a post from HackRead.com Read the original post: Fake Antivirus Apps on Play Store Loaded with SharkBot Banking Trojan...
CVE-2021-24778
The test parameter of the xmlfeed in the Tradetracker-Store WordPress plugin before 4.6.60 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...
CVE-2021-24778
The test parameter of the xmlfeed in the Tradetracker-Store WordPress plugin before 4.6.60 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...
CVE-2021-24778 Tradetracker-Store < 4.6.60 - Admin+ SQL Injection
The test parameter of the xmlfeed in the Tradetracker-Store WordPress plugin before 4.6.60 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...
CVE-2021-24778
CVE-2021-24778 affects the Tradetracker-Store WordPress plugin (pre-4.6.60). The vulnerability arises because the test parameter of the xmlfeed is not sanitised, escaped, or validated before being inserted into a SQL statement, enabling SQL injection. Details across connected sources confirm the ...
What steps are needed to configure new StoreFront servers with an existing Gateway and Store URL
The objective of this article is to provide the recommended steps at a high level in order to configure two new StoreFront servers to work with an existing Gateway virtual server that utilizes an URL created with an old set of StoreFront servers...
WordPress plugin Tradetracker-Store SQL注入漏洞
WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress Tradetracker-Store has a SQL injection vulnerability, which stems from the fact that the test parameters o...
Cosmetics and Beauty Product Online Store跨站脚本漏洞
Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products from Carlo Montero's personal developer.Cosmetics and Beauty Product Online Store is vulnerable to a cross-site scripting vulnerability, no details of the vulnerability are currently available...
Cosmetics and Beauty Product Online Store SQL Injection Vulnerability
Cosmetics And Beauty Product Online Store is an online store for cosmetics and beauty products by Carlo Montero personal developer. Cosmetics and Beauty Product Online Store suffers from a SQL injection vulnerability, no detailed vulnerability details are available at this time...
Medical Store Management System SQL Injection Vulnerability
Medical Store Management System is a pharmacy management system. SQL injection vulnerability exists in Medical Store Management System and no detailed vulnerability details are available...
Execution with Unnecessary Privileges in arc-electron
Impact When the end-user click on the response header that contains a link the target will be opened in ARC new window. This window will have the default preload script loaded which allows the scripts embedded in the link target to execute any logic that ARC has access to from the renderer proces...
The store method allows you to store the same token twice
This issue has been created to upgrade a QA report submission to a medium severity finding. From 0x1f8b: The store method allows you to store the same token twice in NestedRecords.solL130 To do this you must first call storenftId,tokenA,0,reserve and then storenftId,tokenA,100000,reserve because ...
Microweber Email Bombing Vulnerability
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. An email bombing vulnerability exists in versions of Microweber prior to 1.3. The vulnerability stems from a failure to ra...
CVE-2022-25395
Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple reflected cross-site scripting XSS attacks via the search parameter under the /cbpos/ app...
CVE-2022-25395
Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple reflected cross-site scripting XSS attacks via the search parameter under the /cbpos/ app...
CVE-2022-25394
Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...
CVE-2022-25396
Cosmetics and Beauty Product Online Store v1.0 was discovered to contain a SQL injection vulnerability via the search parameter...
CVE-2022-25395
Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple reflected cross-site scripting XSS attacks via the search parameter under the /cbpos/ app...