Lucene search
+L

19 matches found

RedhatCVE
RedhatCVE
•added 2026/01/30 9:23 p.m.•30 views

CVE-2026-1600

A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted element is an unknown function of the file /hungry/addtocart of the component Add-to-Cart Submission Endpoint. The manipulation of the argument price/allprice leads to business log...

5.3CVSS5.5AI score0.00287EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/29 6:16 p.m.•18 views

CVE-2026-1600

A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted element is an unknown function of the file /hungry/addtocart of the component Add-to-Cart Submission Endpoint. The manipulation of the argument price/allprice leads to business log...

5.3CVSS0.00287EPSS
SaveExploits1References5
OSV
OSV
•added 2026/01/29 6:16 p.m.•18 views

CVE-2026-1600

A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted element is an unknown function of the file /hungry/addtocart of the component Add-to-Cart Submission Endpoint. The manipulation of the argument price/allprice leads to business log...

4.3CVSS5.4AI score0.00287EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/01/29 6:02 p.m.•9 views

CVE-2026-1600 Bdtask Bhojon All-In-One Restaurant Management System Add-to-Cart Submission Endpoint addtocart logic error

A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted element is an unknown function of the file /hungry/addtocart of the component Add-to-Cart Submission Endpoint. The manipulation of the argument price/allprice leads to business log...

5.3CVSS5.5AI score0.00287EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/01/29 6:02 p.m.•22 views

EUVD-2026-4965

A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted element is an unknown function of the file /hungry/addtocart of the component Add-to-Cart Submission Endpoint. The manipulation of the argument price/allprice leads to business log...

5.3CVSS5.5AI score0.00287EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/01/29 12:00 a.m.•17 views

PT-2026-5325

Name of the Vulnerable Software and Affected Versions Bdtask Bhojon All-In-One Restaurant Management System versions prior to 20260117 Description A business logic error exists in the Add-to-Cart Submission Endpoint. The backend accepts user-controlled pricing values without validating them again...

5.3CVSS5.1AI score0.00287EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2026/01/29 12:00 a.m.•19 views

Bdtask Bhojon All-In-One Restaurant Management System has security vulnerabilities.

Bdtask Bhojon All-In-One Restaurant Management System is a restaurant management system developed by the Bangladeshi company Bdtask. The versions of the Bdtask Bhojon All-In-One Restaurant Management System prior to version 20260116 contained security vulnerabilities. These vulnerabilities were...

5.3CVSS5.8AI score0.00287EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2008-4075

Malware in sbrugna...

7.5CVSS6.4AI score0.00997EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
•added 2025/02/11 12:00 a.m.•12 views

PT-2025-6150 · Unknown · 1000 Projects Bookstore Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Bookstore Management System version 1.0 Description: A critical issue has been found in the 1000 Projects Bookstore Management System, affecting some unknown functionality of the file addtocart.php. The manipulation of the...

8.8CVSS8.5AI score0.00545EPSS
SaveExploits1References11
CVE
CVE
•added 2024/12/27 12:00 a.m.•101 views

CVE-2024-50944

An integer overflow vulnerability exists in the shopping cart functionality of SimplCommerce (specifically at commit 230310c8d7a0408569b292c5a805c459d47a1d8f and version 1.0.0 ). The flaw resides in the quantity parameter within the CartController's AddToCart method due to insufficient validation...

7.4AI score0.01001EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/27 12:00 a.m.•3 views

CVE-2024-50944: Integer Overflow or Wraparound

Integer overflow vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f in the shopping cart functionality. The issue lies in the quantity parameter in the CartController's AddToCart method...

9.8CVSS5.9AI score0.01001EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/20 12:00 a.m.•21 views

PT-2024-34465 · Unknown · Simplcommerce

Name of the Vulnerable Software and Affected Versions: SimplCommerce version at commit 230310c8d7a0408569b292c5a805c459d47a1d8f SimplCommerce version 1.0.0 Description: An integer overflow vulnerability exists in the shopping cart functionality of SimplCommerce. The issue lies in the quantity...

9.8CVSS7.3AI score0.01001EPSS
SaveExploits0References14
Openbugbounty
Openbugbounty
•added 2022/11/10 2:31 a.m.•18 views

addtocart.co.uk Cross Site Scripting vulnerability OBB-3046701

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/01/12 2:27 p.m.•16 views

royaldragonvodka.com XSS vulnerability

Vulnerable URL: http://www.royaldragonvodka.com/en/addtocart.php?id=4"...

6.9AI score
SaveExploits0
exploitpack
exploitpack
•added 2014/10/02 12:00 a.m.•25 views

RBS Change Complet Open Source 3.6.8 - Cross-Site Request Forgery

RBS Change Complet Open Source 3.6.8 - Cross-Site Request Forgery Exploit Title: RBS Change Complet Open Source CSRF Google Dork: intext:"une réalisation rbs" Date: 10/01/2014 Exploit Author: KrustyHack Vendor Homepage: http://www.rbschange.fr/ Software Link:...

7.5AI score
SaveExploits0
Prion
Prion
•added 2008/09/15 5:12 p.m.•21 views

Sql injection

SQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an addtocart action, a different vector than CVE-2007-2672...

7.5CVSS8.8AI score0.02516EPSS
SaveExploits4References5Affected Software1
CVE
CVE
•added 2008/09/15 4:00 p.m.•62 views

CVE-2008-4090

CVE-2008-4090 : Affects PHP Coupon Script 4.0. The vulnerability is in index.php and allows SQL injection via the id parameter in an addtocart action, enabling remote arbitrary SQL execution.

7.5CVSS8.4AI score0.00997EPSS
SaveExploits2References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/09/15 12:00 a.m.•4 views

CVE-2008-4090: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an addtocart action, a different vector than CVE-2007-2672...

7.5CVSS6.4AI score0.00997EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2008/09/02 12:00 a.m.•42 views

Coupon Script 4.0 - id SQL Injection

Coupon Script 4.0 - id SQL Injection || | | Coupon Script 4.0 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | WwW.tryag.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

SaveExploits0
Rows per page
Query Builder