12727 matches found
Android users installed 172 malicious apps 335m times last month
By Waqas In September alone, over 335 million Android users were tricked into downloading malware-infected apps from the Google Play Store. This is a post from HackRead.com Read the original post: Android users installed 172 malicious apps 335m times last month...
CVE-2019-8290
Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sentregister.php allowing special characters to be included and an XSS payload to be injected...
CVE-2019-8291
Online Store System v1.0 deletefile.php doesn't check to see if a user has administrative rights nor does it check for path traversal...
CVE-2019-8292
Online Store System v1.0 deleteproduct.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion...
CVE-2019-8288
Vulnerability in Online Store v1.0, Stored XSS in userview.php where adidasmemberuser variable is not sanitized...
CVE-2019-8291
Online Store System v1.0 deletefile.php doesn't check to see if a user has administrative rights nor does it check for path traversal...
CVE-2019-8292
Online Store System v1.0 deleteproduct.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion...
CVE-2019-8290
Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sentregister.php allowing special characters to be included and an XSS payload to be injected...
CVE-2019-8288
Vulnerability in Online Store v1.0, Stored XSS in userview.php where adidasmemberuser variable is not sanitized...
CVE-2019-8289
Vulnerability in Online Store v1.0, stored XSS in admin/userview.php adidasmemberemail variable...
CVE-2019-8289
Vulnerability in Online Store v1.0, stored XSS in admin/userview.php adidasmemberemail variable...
Format string
Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sentregister.php allowing special characters to be included and an XSS payload to be injected...
Path traversal
Online Store System v1.0 deletefile.php doesn't check to see if a user has administrative rights nor does it check for path traversal...
Design/Logic Flaw
Vulnerability in Online Store v1.0, Stored XSS in userview.php where adidasmemberuser variable is not sanitized...
Design/Logic Flaw
Vulnerability in Online Store v1.0, stored XSS in admin/userview.php adidasmemberemail variable...
Arbitrary file deletion
Online Store System v1.0 deleteproduct.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion...
CVE-2019-8290
CVE-2019-8290 affects Online Store v1.0. The vulnerability arises from the registration flow: posting to sent_register.php allows special characters to bypass the member email format validation and enables an XSS payload to be injected. The connected materials confirm an XSS issue stemming from i...
CVE-2019-8292
Online Store System v1.0 deleteproduct.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion...
CVE-2019-8292
The CVE-2019-8292 entry concerns Online Store System v1.0 where delete_product.php fails to verify authentication or administrative privileges, enabling arbitrary product deletion. This is an access control flaw (no authentication checks or admin rights verification) that directly affects the del...