11 matches found
CVE-2025-61456
🛡️ CVE開示: CVE-2025-61456 — Eコマースプロジェクトにおける反射型XSS 開示日: 2025年10月14日 CVE ID: CVE-2025-61456 深刻度: MEDIUM CVSS 6.1 🧩 概要 E-commerce Project v1.0 の index.php...
CVE-2025-61455
🛡️ CVE 開示: CVE-2025-61455 — EコマースプロジェクトにおけるSQLインジェクション 開示日: 2025年10月14日 CVE ID: CVE-2025-61455 深刻度: CRITICAL CVSS 9.8 🧩 概要 E-commerce Project v1.0 の signup.inc.php エンドポイントに、重大なSQLインジェクションの脆弱性が存在します。このアプリケーションは、サニタイズされていないユーザー入力をSQLクエリに直接組み込んでおり、認証されていない攻撃者が認証をバイパスし、任意のSQLコマンドを実行できる可能性があります。...
CVE-2025-61454
🛡️ CVE 開示: CVE-2025-61454 — Eコマースプロジェクトにおける反射型XSS 開示日: 2025年10月14日 CVE ID: CVE-2025-61454 深刻度: MEDIUM CVSS 6.1 🧩 概要 E-commerce Project v1.0 の search.php エンドポイントに、反射型クロスサイトスクリプティング XSS の脆弱性が存在します。search...
EUVD-2026-77128
A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...
CVE-2026-90598
A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...
CVE-2026-90598 jaygajera17 E-commerce-project-springBoot UserController.java UserController.updateUser authorization
A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...
CVE-2026-90598 jaygajera17 E-commerce-project-springBoot UserController.java UserController.updateUser authorization
A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...
CVE-2026-90598: Authorization Bypass Through User-Controlled Key
A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypas...
CVE-2025-63879: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripted XSS vulnerability in the /ecommerce/products.php component of E-commerce Project v1.0 and earlier allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into the id parameter...
