All CosmicBytez Labs articles tagged #Ecommerce, across news, security advisories, how-to guides, and projects.
CVSS 9.8 SQL injection vulnerability in the show_price_by_pdtId.php endpoint of the Fruits Bazar PHP/MySQLi ecommerce project allows unauthenticated attackers to read and manipulate the entire database.
A high-severity unrestricted file upload vulnerability in the kirilkirkov Ecommerce-CodeIgniter-Bootstrap allows authenticated vendor users to upload...
A CVSS 9.8 vulnerability in Systempay 1.0 allows attackers to brute force a 16-character production secret key from intercepted POST data, enabling them...
OpenCart 3.0.3.8 fails to regenerate the OCSESSID session cookie after authentication, allowing attackers to inject a known session ID and hijack any user...
A high-severity SQL injection vulnerability has been discovered in SourceCodester Pizzafy Ecommerce System 1.0, allowing remote attackers to manipulate...