6 matches found
CVE-2026-108964
The SourceCodester Performance Indicator System 1.0 is vulnerable to a remote SQL injection flaw located in the /opils/admin/addproduct.php file. An attacker can exploit this by manipulating the prodcategory argument. While the specific component within the file is not detailed, the vulnerability...
CVE-2026-108964 SourceCodester Performance Indicator System addproduct.php sql injection
A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made publ...
EUVD-2026-98278
A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made publ...
CVE-2026-108964: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made publ...
CVE-2024-4923: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/addproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...
PT-2024-33366
Name of the Vulnerable Software and Affected Versions Codezips E-Commerce Site version 1.0 Description A critical issue has been found in the Codezips E-Commerce Site, affecting the file admin/addproduct.php. The manipulation of the profilepic argument leads to unrestricted upload. The attack can...