Lucene search
K

33 matches found

NVD
NVD
added 2026/01/08 5:15 p.m.1 views

CVE-2025-61246

indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/reviewaction.php via the proId parameter...

9.8CVSS0.00015EPSS
Exploits2References1
OSV
OSV
added 2026/01/08 5:15 p.m.0 views

CVE-2025-61246

indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/reviewaction.php via the proId parameter...

9.8CVSS5.9AI score0.00015EPSS
Exploits2References1
CVE
CVE
added 2026/01/08 12:0 a.m.8 views

CVE-2025-61246

CVE-2025-61246 affects indieka900 online-shopping-system-php 1.0. The vulnerability is SQL Injection in master/review_action.php via the proId parameter, caused by unsafely concatenating user input into SQL. This is documented across multiple sources in the connected documents, including Red Hat,...

9.8CVSS7.6AI score0.00015EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.2 views

Projects We develop 安全漏洞

Projects We develop is an event management software by Puneeth Reddy H C Individual Developer. A security vulnerability exists in Projects We develop version 1.0, which stems from the incorrect manipulation of the parameter proId in the file master/reviewaction.php, which could lead to an SQL...

9.8CVSS7.4AI score0.00015EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2026/01/08 12:0 a.m.2 views

CVE-2025-61246

indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/reviewaction.php via the proId parameter...

7.6AI score0.00015EPSS
Exploits2References1
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.3 views

PT-2026-1824

Name of the Vulnerable Software and Affected Versions indieka900 online-shopping-system-php version 1.0 Description The software is susceptible to a SQL Injection issue in the 'master/review action.php' file through the proId parameter. Recommendations Apply updates to address the SQL Injection...

9.8CVSS7.6AI score0.00015EPSS
Exploits2References4
GithubExploit
GithubExploit
added 2026/01/05 6:19 p.m.130 views

Exploit for CVE-2025-61246

CVE-2025-61246 - SQL Injection Vulnerability in Online Shoppin...

9.8AI score0.00015EPSS
Exploits2
CNVD
CNVD
added 2025/11/18 12:0 a.m.1 views

Inventory Management System PROID Parameter SQL Injection Vulnerability

Inventory Management System is an inventory management system. The Inventory Management System suffers from a SQL injection vulnerability that originates from the PROID parameter in the /index.php?q=product file that does not securely filter user input. An attacker can exploit this vulnerability ...

9.8CVSS8.2AI score0.00027EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/17 4:6 a.m.5 views

CVE-2025-13234

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

9.8CVSS6.4AI score0.00027EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/16 3:30 a.m.2 views

EUVD-2025-197712

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

6.5CVSS6.5AI score0.00027EPSS
Exploits1References6
NVD
NVD
added 2025/11/16 3:15 a.m.2 views

CVE-2025-13234

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

9.8CVSS0.00027EPSS
Exploits1References5
OSV
OSV
added 2025/11/16 3:15 a.m.0 views

CVE-2025-13234

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

9.8CVSS5.8AI score0.00027EPSS
Exploits1References5
CVE
CVE
added 2025/11/16 3:2 a.m.6 views

CVE-2025-13234

The CVE-2025-13234 affects itsourcecode Inventory Management System 1.0, with a SQL injection flaw in the PROID parameter of /index.php?q=product. Multiple sources confirm remote exploitation and a publicly released exploit. Remediation is not detailed in the initial document beyond recommending ...

9.8CVSS6.4AI score0.00027EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/11/16 3:2 a.m.8 views

CVE-2025-13234 itsourcecode Inventory Management System index.php sql injection

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

6.5CVSS0.00027EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/16 3:2 a.m.2 views

CVE-2025-13234 itsourcecode Inventory Management System index.php sql injection

A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been mad...

6.5CVSS6.7AI score0.00027EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/11/16 12:0 a.m.1 views

itsourcecode Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system. The Inventory Management System suffers from a SQL injection vulnerability that originates from the PROID parameter in the /index.php?q=product file that does not securely filter user input. An attacker can exploit this vulnerability ...

9.8CVSS7AI score0.00027EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-26067

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00066EPSS
Exploits1References1
OSV
OSV
added 2025/08/28 2:15 p.m.1 views

CVE-2025-51968

A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize user-supplied input in the proId POST parameter, allowing attackers to inject arbitrary SQL expressions...

6.5CVSS6AI score0.00066EPSS
Exploits1References1
NVD
NVD
added 2025/08/28 2:15 p.m.3 views

CVE-2025-51968

A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize user-supplied input in the proId POST parameter, allowing attackers to inject arbitrary SQL expressions...

6.5CVSS0.00066EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.2 views

PuneethReddyHc Online Shopping System Advanced 安全漏洞

PuneethReddyHc Online Shopping System Advanced is an open source online shopping system from the individual developers at Puneeth Reddy HC in India. A security vulnerability exists in PuneethReddyHc Online Shopping System Advanced version 1.0, which stems from the proId parameter not being cleare...

6.5CVSS7.7AI score0.00066EPSS
Exploits1References2
Rows per page
Query Builder