Lucene search
+L

8 matches found

CNVD
CNVD
•added 2025/09/08 12:00 a.m.•12 views

Online Shopping Portal /admin/updateorder.php Cross-Site Scripting Vulnerability

Online Shopping Portal is an online store. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in /admin/updateorder.php, which can be exploited by an attacker to execute arbitrary web script o...

5.4CVSS6AI score0.00209EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/09/06 12:23 a.m.•20 views

CVE-2025-57576

PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting XSS in /admin/updateorder.php...

5.4CVSS6.3AI score0.00209EPSS
SaveExploits1References1
NVD
NVD
•added 2025/09/04 4:15 p.m.•14 views

CVE-2025-57576

PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting XSS in /admin/updateorder.php...

5.4CVSS0.00209EPSS
SaveExploits1References1
OSV
OSV
•added 2025/09/04 4:15 p.m.•9 views

CVE-2025-57576

PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting XSS in /admin/updateorder.php...

5.4CVSS5.8AI score0.00209EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/09/04 12:00 a.m.•23 views

CVE-2025-57576

PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting XSS in /admin/updateorder.php...

0.00209EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/04 12:00 a.m.•22 views

PT-2025-36004

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Shopping Portal version 2.1 Description: PHPGurukul Online Shopping Portal version 2.1 is susceptible to Cross Site Scripting XSS in the /admin/updateorder.php endpoint. Recommendations: As a mitigation, consider implementin...

5.4CVSS6.1AI score0.00209EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/09/04 12:00 a.m.•12 views

PHPGurukul Online Shopping Portal 安全漏洞

Online Shopping Portal is an online store. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in /admin/updateorder.php, which can be exploited by an attacker to execute arbitrary web script o...

5.4CVSS6AI score0.00209EPSS
SaveExploits1References1
CVE
CVE
•added 2025/09/04 12:00 a.m.•31 views

CVE-2025-57576

The PHPGurukul Online Shopping Portal version 2.1 is susceptible to a Cross-Site Scripting (XSS) vulnerability within the /admin/updateorder.php endpoint. The root cause is a lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject a crafted payload to ex...

5.7AI score0.00209EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder