CVE-2025-1903 Codezips Online Shopping Website cart_add.php sql injection

A vulnerability was found in Codezips Online Shopping Website 1.0. It has been rated as critical. This issue affects some unknown processing of the file /cartadd.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed t...

CVE-2025-1903

CVE-2025-1903 affects Codezips Online Shopping Website 1.0. The vulnerability allows SQL injection by manipulating the id argument in /cart_add.php and can be exploited remotely. Multiple sources (NVD, Red Hat, CVE registries) describe a critical impact with high confidentiality, integrity, and a...

CVE-2025-1903 Codezips Online Shopping Website cart_add.php sql injection

A vulnerability was found in Codezips Online Shopping Website 1.0. It has been rated as critical. This issue affects some unknown processing of the file /cartadd.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed t...

cardinalphilanthropy.ca Cross Site Scripting vulnerability OBB-4031914

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-9670

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 136 Description A issue exists where scanning certain QR codes containing website URLs can lead to the URL being opened without a confirmation alert. Recommendations For Firefox for iOS versions prior to 136,...

CVE-2024-9149: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...

PT-2025-9672

Name of the Vulnerable Software and Affected Versions Wind Media E-Commerce Website Template versions prior to 1.5 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-9620

Name of the Vulnerable Software and Affected Versions Codezips Online Shopping Website version 1.0 Description A critical issue affects the processing of the file /cart add.php, where the manipulation of the id argument leads to SQL injection. This issue can be exploited remotely. Recommendations...

CVE-2025-1903: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Codezips Online Shopping Website 1.0. It has been rated as critical. This issue affects some unknown processing of the file /cartadd.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed t...

Codezips Online Shopping Website 安全漏洞

Codezips Online Shopping Website is a Codezips open source online store system. A security vulnerability exists in Codezips Online Shopping Website version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to SQL injection...

CVE-2025-27426: URL Redirection to Untrusted Site

Malicious websites utilizing a server-side redirect to an internal error page could result in a spoofed website URL. This vulnerability was fixed in Firefox for iOS 136...

floridababeruth.com Cross Site Scripting vulnerability OBB-4031911

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mobirolo.com Cross Site Scripting vulnerability OBB-4031895

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

careyes.com.ar Cross Site Scripting vulnerability OBB-4031893

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eventscribe.net Cross Site Scripting vulnerability OBB-4031882

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bhhs.digitalarchive.us Cross Site Scripting vulnerability OBB-4031880

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CodeChecker open redirect when URL contains multiple slashes after the product name

Summary --- CodeChecker versions up to 6.24.5 contain an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL's path segment. This results in bypassing protections against CVE-2021-28861, leading to the same open redirect pathway. Detai...

ikatha.com Cross Site Scripting vulnerability OBB-4031840

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mtvgmbh.com Cross Site Scripting vulnerability OBB-4031836

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

einmallaken.de Cross Site Scripting vulnerability OBB-4031816

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...