CVE-2025-6317

A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/confirm.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2025-6343

A vulnerability, which was classified as critical, was found in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /admin/adminproduct.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-6315

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /cart2.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has...

CVE-2025-6306

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/adminindex.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-6342

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. This issue affects some unknown processing of the file /admin/adminfootball.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The exploit...

InnoShop security vulnerabilities

InnoShop is an open source e-commerce system based on Laravel 11 by InnoShop Open Source. A security vulnerability exists in InnoShop 0.4.1 and earlier versions, which stems from the presence of insecure direct object references in multiple locations in the front-end store, which could lead to th...

CVE-2025-52968

xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. For example, xdg-open could be modified to, by default, associate x-scheme-handler/https with the execution of a browser with command-line options that arrange for an empty cookie...

CVE-2025-6484

A vulnerability was found in code-projects Online Shopping Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument catid/brandid/keyword/proId/pid leads to sql injection. The attack may be launched...

CVE-2025-6484

A vulnerability was found in code-projects Online Shopping Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument catid/brandid/keyword/proId/pid leads to sql injection. The attack may be launched...

CVE-2025-6484 code-projects Online Shopping Store action.php sql injection

A vulnerability was found in code-projects Online Shopping Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument catid/brandid/keyword/proId/pid leads to sql injection. The attack may be launched...

CVE-2025-6484

CVE-2025-6484 affects code-projects Online Shopping Store 1.0. The vulnerability is in the file /action.php, where manipulation of the parameters cat_id, brand_id, keyword, proId, pid leads to an SQL injection. It can be exploited remotely and the exploit has been disclosed publicly. The evidence...

CVE-2025-6484 code-projects Online Shopping Store action.php sql injection

A vulnerability was found in code-projects Online Shopping Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument catid/brandid/keyword/proId/pid leads to sql injection. The attack may be launched...

Code-Projects Online Shopping Store Security Vulnerabilities

Code-Projects Online Shopping Store is a Code-Projects open source online store. A security vulnerability exists in Code-Projects Online Shopping Store version 1.0, which originates from SQL injection due to incorrect manipulation of the parameters catid/brandid/keyword/proId/pid in file/action.p...

CVE-2025-6484: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Shopping Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument catid/brandid/keyword/proId/pid leads to sql injection. The attack may be launched...

PT-2025-26562 · Unknown · Code-Projects Online Shopping Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shopping Store version 1.0 Description: A critical issue affects an unknown functionality of the file /action.php. The manipulation of the arguments cat id, brand id, keyword, proId, pid leads to SQL injection. The attack...

Efficient Retail Video Annotation: a Robust Key Frame Generation Approach for Product and Customer Interaction Analysis

Accurate video annotation plays a vital role in modern retail applications, including customer behavior analysis, product interaction detection, and in-store activity recognition. However, conventional annotation methods heavily rely on time-consuming manual labeling by human annotators,...

CVE-2025-6354

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /function/customersignup.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

CVE-2025-6354

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /function/customersignup.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

CVE-2025-6354 code-projects Online Shoe Store customer_signup.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /function/customersignup.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

CVE-2025-6354

CVE-2025-6354 affects code-projects Online Shoe Store 1.0. The vulnerability is a SQL injection in the /function/customer_signup.php file, triggered by manipulating the email parameter due to lack of input validation. Multiple connected sources corroborate remote exploitation potential and public...