EUVD-2020-26494

Malware in sbrugna...

EUVD-2025-16852

Malicious code in bioql PyPI...

CVE-2025-5575 PHPGurukul Dairy Farm Shop Management System add-product.php sql injection

A vulnerability classified as critical was found in PHPGurukul Dairy Farm Shop Management System 1.3. This vulnerability affects unknown code of the file /add-product.php. The manipulation of the argument productname leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-5575: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Dairy Farm Shop Management System 1.3. This vulnerability affects unknown code of the file /add-product.php. The manipulation of the argument productname leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2020-5308

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php...

CVE-2025-3824 SourceCodester Web-based Pharmacy Product Management System add-product.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file add-product.php. The manipulation of the argument txtprice/txtproductname leads to cross site scripting. T...

PT-2025-17406 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Web-based Pharmacy Product Management System. The issue affects an unknown functionality of the...

CVE-2025-3824: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file add-product.php. The manipulation of the argument txtprice/txtproductname leads to cross site scripting. T...

CVE-2025-3783 SourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted upload

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...

CVE-2025-3783: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...

PT-2024-31933

Name of the Vulnerable Software and Affected Versions PHPGurukul Dairy Farm Shop Management System version 1.1 Description The issue is a Cross-Site Scripting XSS vulnerability. This vulnerability is exploited through the pname parameter in the "add product.php" and "edit product.php" files...

CVE-2023-3695 Campcodes Beauty Salon Management System add-product.php sql injection

A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file add-product.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-3695 Campcodes Beauty Salon Management System add-product.php sql injection

A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file add-product.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-3695: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file add-product.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2023-18817

Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap versions prior to commit d5904379ca55014c5df34c67deda982c73dc7fe5 Description The issue allows attackers to execute arbitrary code via the languages and trans load parameters in the file add product.php. This is...

PT-2022-17960

Name of the Vulnerable Software and Affected Versions Bootstrap versions 3.1.11 through 3.3.7 Description A cross-site scripting XSS issue was found in Bootstrap via the Title parameter in the "/vendor/views/add product.php" endpoint. This allows for potential XSS attacks. Recommendations For...

PT-2021-22060

Name of the Vulnerable Software and Affected Versions Wordpress Simple Shop WordPress plugin versions up to and including 1.2 Description The issue allows attackers to inject arbitrary web scripts via the update row parameter found in the /includes/add product.php file, enabling Reflected...

PT-2020-15939

Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap versions prior to 2020-08-03 Description The issue allows for XSS in the application/modules/vendor/views/add product.php file. Recommendations For versions prior to 2020-08-03, update to a version released afte...

CVE-2020-5308

PHPGurukul Dairy Farm Shop Management System 1.0 is affected by SQL injection (CVE-2020-5307) as demonstrated by input vectors in index.php (username), add-category.php (category, CategoryCode), add-company.php (CompanyName), and add-product.php (ProductName, ProductPrice). Root cause: lack of va...

CVE-2020-5308: Improper Neutralization of Input During Web Page Generation

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php...