Lucene search
K

38 matches found

RedhatCVE
RedhatCVE
added 2026/04/07 10:51 a.m.0 views

CVE-2026-5647

A vulnerability was detected in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/adminfeature.php of the component Add Product Page. The manipulation of the argument productname results in cross site scripting. The attack may be launched remotely. The exploit i...

4.8CVSS4.4AI score0.00035EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/06 12:32 p.m.0 views

EUVD-2026-19225

A vulnerability was detected in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/adminfeature.php of the component Add Product Page. The manipulation of the argument productname results in cross site scripting. The attack may be launched remotely. The exploit i...

4.8CVSS4.4AI score0.00035EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/04/06 10:45 a.m.0 views

CVE-2026-5647 code-projects Online Shoe Store Add Product admin_feature.php cross site scripting

A vulnerability was detected in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/adminfeature.php of the component Add Product Page. The manipulation of the argument productname results in cross site scripting. The attack may be launched remotely. The exploit i...

4.8CVSS4.4AI score0.00035EPSS
Exploits0References5
CVE
CVE
added 2026/04/06 10:45 a.m.4 views

CVE-2026-5647

CVE-2026-5647 affects code-projects Online Shoe Store 1.0. The vulnerability is in the admin feature for adding products, specifically through an XSS condition triggered by manipulating the product_name parameter in /admin/admin_feature.php. The issue is exploitable remotely, and public exploit d...

4.8CVSS4.4AI score0.00035EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/06 10:45 a.m.25 views

CVE-2026-5647 code-projects Online Shoe Store Add Product admin_feature.php cross site scripting

A vulnerability was detected in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/adminfeature.php of the component Add Product Page. The manipulation of the argument productname results in cross site scripting. The attack may be launched remotely. The exploit i...

4.8CVSS0.00035EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.1 views

PT-2026-30597

A vulnerability was detected in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/admin feature.php of the component Add Product Page. The manipulation of the argument product name results in cross site scripting. The attack may be launched remotely. The exploit...

4.8CVSS4.4AI score0.00035EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.2 views

Code-Projects Online Shoe Store 代码注入漏洞

Code-Projects Online Shoe Store is an open-source online shoe store system developed by Code-Projects. Version 1.0 of Code-Projects Online Shoe Store contains a code injection vulnerability. This vulnerability arises from incorrect handling of the parameter productname in the file...

4.8CVSS5.7AI score0.00035EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/12/03 7:5 p.m.2 views

CVE-2025-51682

mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to administrative features. Additionally, they can craft requests based on the client-side code to call these administrative functions directly...

9.8CVSS7.3AI score0.00083EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/12/01 12:0 a.m.1 views

CVE-2025-51682

mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to administrative features. Additionally, they can craft requests based on the client-side code to call these administrative functions directly...

6.9AI score0.00083EPSS
Exploits1References2
NVD
NVD
added 2025/10/28 1:16 a.m.3 views

CVE-2025-12337

A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file /admin/adminfeature.php. Performing a manipulation of the argument pid results in sql injection. The attack may be initiated remotely. The exploit has been released t...

9.8CVSS0.0001EPSS
Exploits1References5
OSV
OSV
added 2025/10/28 1:16 a.m.0 views

CVE-2025-12337

A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file /admin/adminfeature.php. Performing a manipulation of the argument pid results in sql injection. The attack may be initiated remotely. The exploit has been released t...

9.8CVSS5.8AI score0.0001EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/28 12:2 a.m.1 views

CVE-2025-12337 Campcodes Retro Basketball Shoes Online Store admin_feature.php sql injection

A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file /admin/adminfeature.php. Performing a manipulation of the argument pid results in sql injection. The attack may be initiated remotely. The exploit has been released t...

7.5CVSS7.2AI score0.0001EPSS
Exploits1References5
CVE
CVE
added 2025/10/28 12:2 a.m.7 views

CVE-2025-12337

CVE-2025-12337 affects Campcodes Retro Basketball Shoes Online Store 1.0. The vulnerability is a SQL injection in the admin feature, caused by manipulating the pid parameter in the file /admin/admin_feature.php. The issue is exploitable remotely and there are public exploits. Documents consistent...

9.8CVSS7.2AI score0.0001EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/28 12:2 a.m.6 views

CVE-2025-12337 Campcodes Retro Basketball Shoes Online Store admin_feature.php sql injection

A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file /admin/adminfeature.php. Performing a manipulation of the argument pid results in sql injection. The attack may be initiated remotely. The exploit has been released t...

7.5CVSS0.0001EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/10/28 12:0 a.m.3 views

PT-2025-44067

Name of the Vulnerable Software and Affected Versions Campcodes Retro Basketball Shoes Online Store version 1.0 Description A security flaw exists in Campcodes Retro Basketball Shoes Online Store version 1.0. The issue affects an unknown part of the file /admin/admin feature.php. Manipulation of...

9.8CVSS7.3AI score0.0001EPSS
Exploits1References10
CNNVD
CNNVD
added 2025/10/28 12:0 a.m.1 views

CampCodes Retro Basketball Shoes Online Store SQL注入漏洞

CampCodes Retro Basketball Shoes Online Store is an online store for retro basketball shoes from CampCodes. A SQL injection vulnerability exists in CampCodes Retro Basketball Shoes Online Store version 1.0, which stems from incorrect manipulation of the parameter pid in the file...

9.8CVSS7.7AI score0.0001EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-8074

Malware in sbrugna...

6.1CVSS6.3AI score0.0024EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-43692

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.00274EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.1 views

Online Shoe Store admin_feature.php File SQL Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter productcode in the file /admin/adminfeature.php. An attacker can exploit this...

9.8CVSS7.9AI score0.00204EPSS
Exploits1References1
OSV
OSV
added 2025/06/20 4:15 a.m.0 views

CVE-2025-6305

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adminfeature.php. The manipulation of the argument productcode leads to sql injection. It is possible to initiate the attack remotely. The exploit...

9.8CVSS5.8AI score
Exploits0References5
Rows per page
Query Builder