Yearly Archives: 2016
Latest News from Yearly Archives: 2016
Multiple High Risk Vulnerabilities in all Magento 1 Websites
Multiple High Risk Vulnerabilities in all Magento 1 Websites A large number (seventeen in total !) of security vulnerabilities have recently been announced by Magento, many of which are rated as critical and high and should therefore be patched as soon as possible using patch SUPEE-8788. Using the following release versions, Community Edition 1.9.3 or Enterprise Edition 1.14.3, are alternate ways to fix these issues. […]
CubeCart V5 End of Life Announcement
CubeCart V5 End of Life Announcement The CubeCart team have today announced that version 5 of this very popular E-Commerce open source software product will reach end of life on 24th November 2016 and no further release updates, including security releases, will be made available after this date. A large number of V5 users have already upgraded to V6 as the upgrade path is straight […]
Three Joomla Security issues affecting versions 1.6.0 through 3.6.0
Three Joomla security issues have recently been disclosed The three vulnerabilities which affect versions 1.0.6 through 3.6.0 are as follows : • [20160802] – Core – XSS Vulnerability • [20160801] – Core – ACL Violation • [20160803] – Core – CSRF Specific details of each of the vulnerabilities : [20160802] – Core – XSS Vulnerability Project: Joomla! SubProject: CMS Severity: Low Versions: 1.6.0 through 3.6.0 […]
WordPress 4.4.2 Security and Maintenance Release
WordPress 4.4.2 Security and Maintenance Release. WordPress 4.4.2 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.4.1 and earlier are affected by two security issues: a possible SSRF for certain local URIs and an open redirection attack. In addition to the security issues above, WordPress 4.4.2 fixes 17 bugs […]
Dangerous Stored XSS Vulnerability in Magento
Dangerous Stored XSS Vulnerability in Magento During an audit of their WAF, Sucuri discovered a dangerous, but also easy to exploit, Stored XSS Vulnerability in all versions of Magento. The issue could allow attackers to take over your site, create new administrator accounts, steal client information – in fact anything a legitimate administrator account is allowed to do ! Sucuri responsibly disclosed this to the […]
CubeCart Enhanced Admin Order Entry Plugin
CubeCart Enhanced Admin Order Entry Plugin This Enhanced Admin Order Entry plugin greatly improves the process flow for adding new orders especially those added via telephone, in store or written orders and also when revising existing orders. This plugin requires no code edits to your store and is designed to work with CubeCart version 6.0.8 and later. See below for details about each enhancement and […]