63 matches found
EUVD-2019-6540
Malware in sbrugna...
EUVD-2010-4876
Malware in sbrugna...
CVE-2019-15572
Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php...
CVE-2025-2041
A vulnerability, which was classified as critical, has been found in s-a-zhd Ecommerce-Website-using-PHP 1.0. Affected by this issue is some unknown functionality of the file /shop.php. The manipulation of the argument pcat leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2025-2041 s-a-zhd Ecommerce-Website-using-PHP shop.php sql injection
A vulnerability, which was classified as critical, has been found in s-a-zhd Ecommerce-Website-using-PHP 1.0. Affected by this issue is some unknown functionality of the file /shop.php. The manipulation of the argument pcat leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2025-2041 s-a-zhd Ecommerce-Website-using-PHP shop.php sql injection
A vulnerability, which was classified as critical, has been found in s-a-zhd Ecommerce-Website-using-PHP 1.0. Affected by this issue is some unknown functionality of the file /shop.php. The manipulation of the argument pcat leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2025-2041
CVE-2025-2041 affects the web app “s-a-zhd Ecommerce-Website-using-PHP 1.0.” The vulnerability is a SQL injection in the file /shop.php triggered by manipulating the parameter p_cat . It is described as remotely exploitable and the exploit has been disclosed publicly. Connected sources (NVD, Red ...
CVE-2025-2041: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in s-a-zhd Ecommerce-Website-using-PHP 1.0. Affected by this issue is some unknown functionality of the file /shop.php. The manipulation of the argument pcat leads to sql injection. The attack may be launched remotely. The exploit...
PT-2025-10005
Name of the Vulnerable Software and Affected Versions s-a-zhd Ecommerce-Website-using-PHP version 1.0 Description A critical issue has been found in the software, affecting some unknown functionality of the file /shop.php. The manipulation of the p cat argument leads to SQL injection. This issue...
CVE-2024-2271 keerti1924 Online-Book-Store-Website HTTP POST Request shop.php sql injection
A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. It is possible to initiate the...
Design/Logic Flaw
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...
CVE-2024-2271: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. It is possible to initiate the...
CVE-2024-2267: Undefined Security Weakness
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...
PT-2024-19533
Name of the Vulnerable Software and Affected Versions keerti1924 Online-Book-Store-Website version 1.0 Description A critical vulnerability has been found in the keerti1924 Online-Book-Store-Website. This issue affects the file /shop.php of the component HTTP POST Request Handler. The manipulatio...
PT-2022-17759
Name of the Vulnerable Software and Affected Versions EyouCMS version 1.5.4 Description The issue is related to a lack of parameter filtering in the shop.php file, located in the usercontroller directory, which leads to payment logic vulnerabilities. Recommendations For EyouCMS version 1.5.4,...
CVE-2019-15572
Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php...
Sql injection
Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php...
CVE-2019-15572
Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php...
CVE-2019-15572
The CVE-2019-15572 entry describes an SQL injection in Gesior-AAC’s shop.php, affecting versions prior to 2019-05-01. Root cause cited in CNVD-2019-31345 notes lack of validation for externally entered SQL statements in database-driven apps, enabling an attacker to execute arbitrary SQL commands....