CVE-2021-25204

Cross-site scripting XSS vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script or HTM via the subject field to feedbackprocess.php...

CVE-2024-8217: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester E-Commerce Website 1.0 and classified as critical. This vulnerability affects unknown code of the file /Admin/registration.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has bee...

CVE-2021-25207

Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers to execute arbitrary code via the file upload to prodViewUpdate.php...

CVE-2021-25204: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script or HTM via the subject field to feedbackprocess.php...

CVE-2021-25207: Unrestricted Upload of File with Dangerous Type

Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers to execute arbitrary code via the file upload to prodViewUpdate.php...

CVE-2021-25205

SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the update parameter to empViewUpdate.php...

CVE-2021-25205: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the update parameter to empViewUpdate.php...

PT-2021-3847

Name of the Vulnerable Software and Affected Versions SourceCodester E-Commerce Website version 1.0 Description The issue is related to an arbitrary file upload vulnerability in the prodViewUpdate.php script of the E-Commerce Website system. This vulnerability allows an attacker to upload files o...

PT-2021-3846

Name of the Vulnerable Software and Affected Versions SourceCodester E-Commerce Website version 1.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the subject field to "feedback...

PT-2021-3845

Name of the Vulnerable Software and Affected Versions SourceCodester E-Commerce Website version 1.0 Description The issue allows remote attackers to execute arbitrary SQL statements via the update parameter to "empViewUpdate.php". This is related to the lack of protection for the SQL query...