Sql injection

A vulnerability classified as critical was found in SourceCodester Simple and Beautiful Shopping Cart System 1.0. This vulnerability affects unknown code of the file deleteuserquery.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2023-1941

SourceCodester Simple and Beautiful Shopping Cart System 1.0 has a SQL injection flaw in login.php caused by improper handling of the username/password parameters. This can be exploited remotely and may lead to disclosure/injection affecting confidentiality, integrity, and availability. The CVE n...

CVE-2023-1941 SourceCodester Simple and Beautiful Shopping Cart System login.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple and Beautiful Shopping Cart System 1.0. This issue affects some unknown processing of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiat...

CVE-2023-1941 SourceCodester Simple and Beautiful Shopping Cart System login.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple and Beautiful Shopping Cart System 1.0. This issue affects some unknown processing of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiat...

CVE-2023-1940 SourceCodester Simple and Beautiful Shopping Cart System delete_user_query.php sql injection

A vulnerability classified as critical was found in SourceCodester Simple and Beautiful Shopping Cart System 1.0. This vulnerability affects unknown code of the file deleteuserquery.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated remotely. The...

CVE-2023-1940

CVE-2023-1940 affects SourceCodester Simple and Beautiful Shopping Cart System 1.0. The vulnerability is a SQL injection in the file delete_user_query.php triggered by manipulating the parameter user_id . It can be exploited remotely and the exploit has been publicly disclosed. Affected component...

PT-2023-17356 · Sourcecodester · Sourcecodester Simple/Beautiful Shopping Cart System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple and Beautiful Shopping Cart System version 1.0 Description: A critical issue was found in the delete user query.php file, where the manipulation of the user id argument leads to SQL injection. The attack can be initiated...

Simple and Beautiful Shopping Cart System SQL注入漏洞

Simple and Beautiful Shopping Cart System is an e-commerce platform. A SQL injection vulnerability exists in SourceCodester Simple and Beautiful Shopping Cart System version 1.0, which stems from a problem in the file login.php, where manipulation of the parameters username/password can lead to s...

Simple and Beautiful Shopping Cart System SQL注入漏洞

Simple and Beautiful Shopping Cart System is an e-commerce platform. A SQL injection vulnerability exists in SourceCodester Simple and Beautiful Shopping Cart System version 1.0, which stems from a problem in the file deleteuserquery.php, where manipulation of the parameter userid can lead to sql...

PT-2023-17357 · Sourcecodester · Sourcecodester Simple/Beautiful Shopping Cart System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple and Beautiful Shopping Cart System version 1.0 Description: A critical issue has been found in the processing of the file login.php, where the manipulation of the username and password arguments leads to SQL injection. T...

CVE-2023-1124

The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perform LFI attacks...

Design/Logic Flaw

The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perform LFI attacks...

CVE-2023-1124 Shopping Cart & eCommerce Store < 5.4.3 - Admin+ LFI

The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perform LFI attacks...

CVE-2023-1124

CVE-2023-1124 affects the Shopping Cart & eCommerce Store WordPress plugin (versions before 5.4.3). The vulnerability arises from not validating HTTP requests, allowing authenticated administrators to perform Local File Inclusion (LFI) attacks. Impact is high for confidentiality, integrity, and a...

PT-2023-16772 · WordPress · Shopping Cart & Ecommerce Store

Name of the Vulnerable Software and Affected Versions: The Shopping Cart & eCommerce Store WordPress plugin versions prior to 5.4.3 Description: The issue allows authenticated users with admin privileges to perform Local File Inclusion LFI attacks due to a lack of validation of HTTP requests. LFI...

WordPress plugin Shopping Cart & eCommerce Store 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exists in th...

CVE-2023-1739

A vulnerability was found in SourceCodester Simple and Beautiful Shopping Cart System 1.0 and classified as critical. This issue affects some unknown processing of the file upload.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

CVE-2023-1739

A vulnerability was found in SourceCodester Simple and Beautiful Shopping Cart System 1.0 and classified as critical. This issue affects some unknown processing of the file upload.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

Out-of-bounds

A vulnerability was found in SourceCodester Simple and Beautiful Shopping Cart System 1.0 and classified as critical. This issue affects some unknown processing of the file upload.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

CVE-2023-1739

The CVE-2023-1739 issue affects SourceCodester Simple and Beautiful Shopping Cart System 1.0, specifically the file upload.php handler. The root cause is improper handling of uploads, enabling unrestricted remote file uploads. This could allow an attacker to upload arbitrary files, potentially le...