CVE-2025-12337

A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file /admin/adminfeature.php. Performing a manipulation of the argument pid results in sql injection. The attack may be initiated remotely. The exploit has been released t...

CVE-2025-6305 code-projects Online Shoe Store admin_feature.php sql injection

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adminfeature.php. The manipulation of the argument productcode leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2022-2678

CVE-2022-2678 affects SourceCodester Alphaware Simple E-Commerce System. The vulnerable component is the Background Management Page’s admin_feature.php, where an unrestricted upload vulnerability (remote) can be triggered. Public exploit is noted; VDB-205666 is the vulnerability ID. Impact is des...