CVE-2026-5834

A vulnerability was detected in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /admin/adminrunning.php. Performing a manipulation of the argument productname results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now publi...

CVE-2026-5834 code-projects Online Shoe Store admin_running.php cross site scripting

A vulnerability was detected in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /admin/adminrunning.php. Performing a manipulation of the argument productname results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now publi...

CVE-2026-5834: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /admin/adminrunning.php. Performing a manipulation of the argument productname results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now publi...

CVE-2025-14529: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The affected element is an unknown function of the file /admin/adminrunning.php. This manipulation of the argument pid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published a...

CVE-2025-14219: Unrestricted Upload of File with Dangerous Type

A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/adminrunning.php. Executing a manipulation of the argument productimage can lead to unrestricted upload. It is possible to launch the attack remotely...

CVE-2025-13412: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/adminrunning.php. Executing a manipulation of the argument productname can lead to cross site scripting. The attack may be performed from...

CVE-2025-6316

The CVE-2025-6316 entry pertains to code-projects Online Shoe Store 1.0, where the admin_running.php file processes the qty argument. The vulnerability is a SQL injection in an unknown functionality of /admin/admin_running.php, exploitable remotely, with disclosure of exploits in public sources. ...

CVE-2025-6316: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/adminrunning.php. The manipulation of the argument qty leads to sql injection. The attack may be launched remotely. The exploit...