Lucene search
+L

905 matches found

Nuclei
Nuclei
added yesterday77 views

PuneethReddyHC action.php SQL Injection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping through the /action.php prId parameter. Using a post request does not sanitize the user input. id: CVE-2021-41648 info: name: PuneethReddyHC action.php SQL Injection author: daffainfo severity: high descriptio...

9.8CVSS8.6AI score0.5177EPSS
SaveExploits6References5
Nuclei
Nuclei
added yesterday74 views

PuneethReddyHC Online Shopping System homeaction.php SQL Injection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping System through the /homeaction.php catid parameter. Using a post request does not sanitize the user input. id: CVE-2021-41649 info: name: PuneethReddyHC Online Shopping System homeaction.php SQL Injection...

9.8CVSS9AI score0.5177EPSS
SaveExploits2References5
NVD
NVD
added yesterday10 views

CVE-2026-19923

A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkoutprocess.php. Executing a manipulation of the argument totalcount can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the...

6.5CVSS0.002EPSS
SaveExploits0References6
NVD
NVD
added yesterday13 views

CVE-2026-19922

A security flaw has been discovered in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /checkout.php. Performing a manipulation of the argument amount1 results in cross site scripting. The attack can be initiated remotely. The exploit has...

5.1CVSS0.00199EPSS
SaveExploits0References6
EUVD
EUVD
added yesterday7 views

EUVD-2026-59809

A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an unknown function of the file /login.php of the component Login. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit has been made public and cou...

6.9CVSS5.3AI score0.00263EPSS
SaveExploits0References7
EUVD
EUVD
added yesterday7 views

EUVD-2026-59810

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown function of the file /action.php. This manipulation of the argument proId causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

5.3CVSS5.5AI score0.002EPSS
SaveExploits0References7
Cvelist
Cvelist
added yesterday15 views

CVE-2026-19923 code-projects Online Shopping System checkout_process.php sql injection

A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkoutprocess.php. Executing a manipulation of the argument totalcount can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the...

6.5CVSS0.002EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-19923

A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkoutprocess.php. Executing a manipulation of the argument totalcount can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added yesterday7 views

EUVD-2026-59834

A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkoutprocess.php. Executing a manipulation of the argument totalcount can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
CVE
CVE
added yesterday15 views

CVE-2026-19923

Code-projects Online Shopping System 1.0 contains a SQL injection vulnerability in an unknown portion of /checkout_process.php triggered by manipulating the total_count argument. Attack can be launched remotely and the exploit has been publicly released. Exploit maturity is PoC per CVE data; base...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
NVD
NVD
added yesterday8 views

CVE-2026-19921

A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipulation of the argument catid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

6.5CVSS0.002EPSS
SaveExploits0References6
NVD
NVD
added yesterday8 views

CVE-2026-19920

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown function of the file /action.php. This manipulation of the argument proId causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

6.5CVSS0.002EPSS
SaveExploits0References6
NVD
NVD
added yesterday8 views

CVE-2026-19919

A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an unknown function of the file /login.php of the component Login. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit has been made public and cou...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added yesterday14 views

CVE-2026-19922 code-projects Online Shopping System checkout.php cross site scripting

A security flaw has been discovered in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /checkout.php. Performing a manipulation of the argument amount1 results in cross site scripting. The attack can be initiated remotely. The exploit has...

5.1CVSS0.00199EPSS
SaveExploits0References6
CVE
CVE
added yesterday16 views

CVE-2026-19922

Affects code-projects Online Shopping System 1.0; vulnerable component is the file /checkout.php. Manipulating the amount_1 parameter triggers cross-site scripting. Exploitation appears remotely viable; CVSS details in provided metrics show several vectors with a PROOF-OF-CONCEPT exploit maturity...

5.1CVSS3.7AI score0.00199EPSS
SaveExploits0References6
EUVD
EUVD
added yesterday7 views

EUVD-2026-59812

A security flaw has been discovered in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /checkout.php. Performing a manipulation of the argument amount1 results in cross site scripting. The attack can be initiated remotely. The exploit has...

5.1CVSS4AI score0.00199EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-19922

A security flaw has been discovered in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /checkout.php. Performing a manipulation of the argument amount1 results in cross site scripting. The attack can be initiated remotely. The exploit has...

5.1CVSS3.8AI score0.00199EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added yesterday5 views

CVE-2026-19921

A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipulation of the argument catid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

6.5CVSS6.4AI score0.002EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added yesterday17 views

CVE-2026-19921

CVE-2026-19921 affects code-projects Online Shopping System 1.0. The vulnerability is in the unknown functionality of /homeaction.php, where manipulation of the cat_id parameter leads to SQL injection. The issue can be exploited remotely, and public exploits are reported. The connected documents ...

6.5CVSS6.4AI score0.002EPSS
SaveExploits0References6
Cvelist
Cvelist
added yesterday23 views

CVE-2026-19921 code-projects Online Shopping System homeaction.php sql injection

A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipulation of the argument catid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

6.5CVSS0.002EPSS
SaveExploits0References6
Rows per page
Query Builder