CVE-2023-5294 ECshop order.php sql injection

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goodsid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

CVE-2023-5294: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goodsid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

CVE-2023-27210

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/vieworder.php...

Sql injection

A vulnerability, which was classified as critical, has been found in SUL1SSshop. This issue affects some unknown processing of the file application\merch\controller\Order.php. The manipulation of the argument keyword leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2023-1276

A vulnerability, which was classified as critical, has been found in SUL1SSshop. This issue affects some unknown processing of the file application\merch\controller\Order.php. The manipulation of the argument keyword leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2023-1276 SUL1SS_shop Order.php sql injection

A vulnerability, which was classified as critical, has been found in SUL1SSshop. This issue affects some unknown processing of the file application\merch\controller\Order.php. The manipulation of the argument keyword leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2023-1276: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SUL1SSshop. This issue affects some unknown processing of the file application\merch\controller\Order.php. The manipulation of the argument keyword leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2023-0997: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...

CVE-2022-4162: Undefined Security Weakness

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgrow POST parameter before concatenating it to an SQL query in 3row-order.php. This may allow malicious users with at least author privilege to leak sensitive information...

CVE-2022-43046: Improper Neutralization of Input During Web Page Generation

Food Ordering Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /foms/place-order.php...

CVE-2022-43046

Food Ordering Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the component /foms/place-order.php...

PT-2022-21256

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/admin/categories/manage field order.php?id=" API endpoint, where the id variable is vulnerable. This allows for potential unauthorized access and...

PT-2022-20096

Name of the Vulnerable Software and Affected Versions Merchandise Online Store version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /vloggers merch/admin/orders/view order.php?view=user&id= endpoint, specifically through the id variable. No...

CVE-2019-16693

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used...

CVE-2019-16693

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used...

Sql injection

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used...

CVE-2019-16693

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used...

CVE-2019-16693: Improper Neutralization of Special Elements used in an SQL Command

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used...

PT-2018-15169

Name of the Vulnerable Software and Affected Versions Sales & Company Management System SCMS versions prior to 2018-06-06 Description The issue is related to SQL injection via the type parameter in the "member/member order.php" endpoint, specifically involving the O state parameter. Recommendatio...

customersdata.download XSS vulnerability

Open Bug Bounty ID: OBB-648974 Description| Value ---|--- Affected Website:| customersdata.download Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...