Lucene search
K

6 matches found

Cvelist
Cvelist
added 2026/04/29 8:45 p.m.29 views

CVE-2026-7408 SourceCodester Pizzafy Ecommerce System ajax.php save_menu sql injection

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this issue is the function savemenu of the file /admin/ajax.php?action=savemenu. Performing a manipulation results in sql injection. The attack can be initiated remotely. The exploit is now public and may be...

5.8CVSS0.00013EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/28 11:15 a.m.27 views

CVE-2026-7268 SourceCodester Pizzafy Ecommerce System ajax.php save_category sql injection

A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0. This impacts the function savecategory of the file /admin/ajax.php?action=savecategory. Such manipulation of the argument Name leads to sql injection. The attack may be performed from remote. The exploit has been...

6.5CVSS0.00043EPSS
Exploits0References6
OSV
OSV
added 2024/05/16 4:15 a.m.0 views

CVE-2024-4929

A vulnerability classified as problematic has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file /simple-online-bidding-system/admin/ajax.php?action=saveuser. The manipulation leads to cross-site request forgery. It is possible to initiate the...

4.3CVSS4.8AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/05/16 12:0 a.m.1 views

PT-2024-33430 · Sourcecodester · Sourcecodester Simple Online Bidding System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Bidding System version 1.0 Description: A problematic vulnerability has been found in the system, affecting an unknown part of the file "/simple-online-bidding-system/admin/ajax.php?action=save user". This leads t...

6.9CVSS4.9AI score0.00207EPSS
Exploits1References8
OSV
OSV
added 2023/01/13 8:15 p.m.2 views

CVE-2022-46953

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=savewindow...

7.2CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2023/01/13 12:0 a.m.1 views

Dynamic Transaction Queuing System SQL注入漏洞

Dynamic Transaction Queuing System is a dynamic transaction queuing system using PHP/MySQL by Carlo Montero, an individual developer. A security vulnerability exists in Dynamic Transaction Queuing System v1.0, which stems from the id parameter of its /admin/ajax.php?action=savewindow component th...

7.2CVSS7.2AI score0.0026EPSS
Exploits1References2
Rows per page
Query Builder