Sql injection

A vulnerability classified as critical was found in SourceCodester Alphaware Simple E-Commerce System 1.0. This vulnerability affects unknown code. The manipulation of the argument email/password with the input test1%40test.com ' AND SELECT 6077 FROM SELECTSLEEP5dltn AND 'PhRa'='PhRa leads to sql...

CVE-2023-1505 SourceCodester E-Commerce System setDiscount.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester E-Commerce System 1.0. This issue affects some unknown processing of the file /ecommerce/admin/settings/setDiscount.php. The manipulation of the argument id with the input 201737 AND SELECT 8973 FROM...

CVE-2023-1505

CVE-2023-1505 describes a SQL injection in SourceCodester E-Commerce System 1.0, exploitable via the /ecommerce/admin/settings/setDiscount.php endpoint by manipulating the id parameter (example payload includes 201737 AND (SELECT 8973 FROM (SELECT(SLEEP(5)))OoAD)). This remote, high-severity flaw...

CVE-2023-1504 SourceCodester Alphaware Simple E-Commerce System sql injection

A vulnerability classified as critical was found in SourceCodester Alphaware Simple E-Commerce System 1.0. This vulnerability affects unknown code. The manipulation of the argument email/password with the input test1%40test.com ' AND SELECT 6077 FROM SELECTSLEEP5dltn AND 'PhRa'='PhRa leads to sql...

CVE-2023-1504

CVE-2023-1504 affects SourceCodester Alphaware Simple E-Commerce System 1.0. The connected sources describe an SQL injection vulnerability caused by unsafe handling of the login parameters (email/password), allowing remote input to manipulate the query (example input test1%40test.com ' AND (SELEC...

CVE-2023-1503 SourceCodester Alphaware Simple E-Commerce System admin_index.php sql injection

A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file admin/adminindex.php. The manipulation of the argument username/password with the input admin' AND SELECT 8062 FROM SELECTSLEEP5meUD-- hLiX lead...

CVE-2023-1503

CVE-2023-1503 affects SourceCodester Alphaware Simple E-Commerce System 1.0. A SQL injection vulnerability exists in the admin/admin_index.php file, triggered by manipulating the username/password inputs (example payload: admin' AND (SELECT 8062 FROM (SELECT(SLEEP(5)))meUD)-- hLiX). The issue all...

CVE-2023-1502 SourceCodester Alphaware Simple E-Commerce System edit_customer.php sql injection

A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file function/editcustomer.php. The manipulation of the argument firstname/mi/lastname with the input a' RLIKE SLEEP5 AND...

CVE-2023-1502

CVE-2023-1502 affects SourceCodester Alphaware Simple E-Commerce System 1.0. The vulnerability is an SQL injection in the file function/edit_customer.php, triggered by manipulating the firstname/mi/lastname inputs (example payload: a' RLIKE SLEEP(5) AND 'dAbu'='dAbu). It can be exploited remotely...

E-Commerce System SQL注入漏洞

Moosikay E-Commerce System is an e-commerce system by the individual developer Arvin Arandilla. An SQL injection vulnerability exists in E-Commerce System version 1.0, which stems from an incorrect manipulation of the parameter UUSERNAME resulting in sql injection...

Alphaware Simple E-Commerce System SQL注入漏洞

Alphaware Simple E-Commerce System is an e-commerce system by razormist individual developers. A SQL injection vulnerability exists in Alphaware Simple E-Commerce System version 1.0, which is caused by incorrect manipulation of the email/password parameter...

SourceCodester E-Commerce System 跨站脚本漏洞

Moosikay E-Commerce System is an e-commerce system by the individual developer Arvin Arandilla. A cross-site scripting vulnerability exists in SourceCodester E-Commerce System version 1.0, which stems from the fact that incorrect manipulation of the CATEGORY parameter can lead to cross-site...

CVE-2023-26905

An issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection that can directly issue instructions to the background database system via /alphaware/details.php?id...

Sql injection

An issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection that can directly issue instructions to the background database system via /alphaware/details.php?id...

CVE-2023-26905

An issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection that can directly issue instructions to the background database system via /alphaware/details.php?id...

CVE-2023-26905

An issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection that can directly issue instructions to the background database system via /alphaware/details.php?id...

CVE-2023-26905

The vulnerability CVE-2023-26905 affects Alphaware - Simple E-Commerce System v1.0, with a SQL injection in the /alphaware/details.php?id endpoint. The root cause is improper input handling allowing an attacker to inject SQL commands into the background database. Impact is described as highly sev...

Adobe Commerce Cross-Site Scripting Vulnerability (CNVD-2024-09609)

Adobe Commerce is the United States of America Odobie Adobe company of a kind for merchants and brands of the world's leading digital commerce solutions. A cross-site scripting vulnerability exists in Adobe Commerce. The vulnerability stems from the application's lack of effective filtering and...

Adobe Commerce License Issue Vulnerability (CNVD-2024-09608)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce is vulnerable to an authorization issue. The vulnerability stems from improper authorization of the application and can be exploited by a...

Adobe Commerce 访问控制错误漏洞

Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. An access control error vulnerability exists in Adobe Commerce version 2.4.4-p2 and earlier, 2.4.5-p1 and earlier, which stems from improper access control...