CVE-2025-8933

A vulnerability was identified in 1000 Projects Sales Management System 1.0. This issue affects some unknown processing of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2025-8935 1000 Projects Sales Management System custcmp.php sql injection

A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-8935 1000 Projects Sales Management System custcmp.php sql injection

A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-8935

CVE-2025-8935 affects the open-source product “1000 Projects Sales Management System” version 1.0. The vulnerability exists in an unknown functionality of the file /superstore/custcmp.php , where manipulating the Username parameter triggers a SQL injection. The impact is remote exploitation with ...

CVE-2025-8934 1000 Projects Sales Management System sales.php cross site scripting

A vulnerability has been found in 1000 Projects Sales Management System 1.0. Affected is an unknown function of the file /sales.php. The manipulation of the argument select2112 leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-8934

CVE-2025-8934 affects 1000 Projects Sales Management System v1.0. The vulnerability lies in an unknown function of file /sales.php , where manipulation of the parameter select2112 enables cross-site scripting (XSS) . Exploitation is possible remotely and has been publicly disclosed. Multiple conn...

CVE-2025-8934 1000 Projects Sales Management System sales.php cross site scripting

A vulnerability has been found in 1000 Projects Sales Management System 1.0. Affected is an unknown function of the file /sales.php. The manipulation of the argument select2112 leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-8933 1000 Projects Sales Management System sales.php cross site scripting

A vulnerability was identified in 1000 Projects Sales Management System 1.0. This issue affects some unknown processing of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2025-8933 1000 Projects Sales Management System sales.php cross site scripting

A vulnerability was identified in 1000 Projects Sales Management System 1.0. This issue affects some unknown processing of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2025-8932

A vulnerability was determined in 1000 Projects Sales Management System 1.0. This vulnerability affects unknown code of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2025-8932

A vulnerability was determined in 1000 Projects Sales Management System 1.0. This vulnerability affects unknown code of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2025-8932 1000 Projects Sales Management System sales.php sql injection

A vulnerability was determined in 1000 Projects Sales Management System 1.0. This vulnerability affects unknown code of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2025-8932 1000 Projects Sales Management System sales.php sql injection

A vulnerability was determined in 1000 Projects Sales Management System 1.0. This vulnerability affects unknown code of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2025-8932

CVE-2025-8932 affects 1000 Projects Sales Management System 1.0. A SQL injection exists in the code path handling the /superstore/admin/sales.php file, caused by manipulating the ssalescat parameter. The vulnerability is remotely exploitable and has been publicly disclosed. Several connected sour...

1000 Projects Sales Management System 安全漏洞

1000 Projects Sales Management System is an open source sales management system from 1000 Projects. A security vulnerability exists in version 1.0 of the 1000 Projects Sales Management System, which is caused by an SQL injection due to misuse of the parameter salescat in the file...

PT-2025-33112 · Unknown · 1000 Projects Sales Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Sales Management System version 1.0 Description: A vulnerability exists in 1000 Projects Sales Management System 1.0, affecting unknown code within the /superstore/admin/sales.php file. Manipulation of the ssalescat parameter...

1000 Projects Sales Management System 注入漏洞

1000 Projects Sales Management System is an open source sales management system from 1000 Projects. An injection vulnerability exists in version 1.0 of 1000 Projects Sales Management System, which originates from a SQL injection due to incorrect operation of parameter select2 in file...

1000 Projects Sales Management System 注入漏洞

1000 Projects Sales Management System is an open source sales management system from 1000 Projects. An injection vulnerability exists in version 1.0 of 1000 Projects Sales Management System, which is caused by a SQL injection due to incorrect manipulation of the parameter Username in the file...

1000 Projects Sales Management System 代码注入漏洞

1000 Projects Sales Management System is an open source sales management system from 1000 Projects. A code injection vulnerability exists in version 1.0 of 1000 Projects Sales Management System, which originates from a cross-site scripting attack due to the incorrect operation of parameter...

PT-2025-33114 · Unknown · 1000 Projects Sales Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Sales Management System version 1.0 Description: A vulnerability has been found in an unknown function of the file /sales.php. The manipulation of the argument select2112 leads to cross site scripting. The attack can be launched...