3 matches found
CVE-2026-55219
Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.5, the credit payment implementation in app/Livewire/Invoices/Show.php executes a pessimistic row lock lockForUpdate outside of an active database transaction. Because MySQL/MariaDB...
CVE-2026-44585 Paymenter: Broken object level authorization via service reference manipulation on ticket creation
Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the ticket creation endpoint accepts a user-supplied service identifier without enforcing ownership validation, allowing authenticated users to create support tickets referencing...
Joomla Component redSHOP 1.5 Blind SQL Injection Vulnerability
Exploit for php platform in category web applications ----------------------------------------------------------------------------- Joomla Component redSHOP 1.5 Blind SQL Injection Vulnerability ----------------------------------------------------------------------------- Author....: fame...