CVE-2024-50968

CVE-2024-50968 Description A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker...

CVE-2026-2865

A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of the file admin/productcontroller.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Product results in sql injection. The attack may be...

CVE-2026-2865

A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of the file admin/productcontroller.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Product results in sql injection. The attack may be...

CVE-2026-2865

A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of the file admin/productcontroller.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Product results in sql injection. The attack may be...

CVE-2026-2865

The CVE-2026-2865 affects itsourcecode Agri-Trading Online Shopping System 1.0. A vulnerability exists in the HTTP POST Request Handler in admin/productcontroller.php where manipulating the Product argument can trigger SQL injection. The flaw can be exploited remotely and the exploit has been pub...

CVE-2026-2865 itsourcecode Agri-Trading Online Shopping System HTTP POST Request productcontroller.php sql injection

A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of the file admin/productcontroller.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Product results in sql injection. The attack may be...

CVE-2026-2865 itsourcecode Agri-Trading Online Shopping System HTTP POST Request productcontroller.php sql injection

A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of the file admin/productcontroller.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Product results in sql injection. The attack may be...

CVE-2026-2865

A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of the file admin/productcontroller.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Product results in sql injection. The attack may be...

CVE-2026-2865: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0. This impacts an unknown function of the file admin/productcontroller.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Product results in sql injection. The attack may be...

PT-2026-21368

Name of the Vulnerable Software and Affected Versions itsourcecode Agri-Trading Online Shopping System version 1.0 Description A flaw exists within the Agri-Trading Online Shopping System that allows for SQL injection. This issue stems from manipulating the Product argument within an HTTP POST...

itsourcecode Agri-Trading Online Shopping System SQL注入漏洞

itsourcecode Agri-Trading Online Shopping System is an open-source online shopping system developed by itsourcecode. Version 1.0 of the itsourcecode Agri-Trading Online Shopping System has a SQL injection vulnerability. This vulnerability arises from the handling of the Product parameter in the...

EUVD-2025-18855

Malicious code in bioql PyPI...

EUVD-2025-20688

Malicious code in bioql PyPI...

CVE-2025-7193

A vulnerability was found in itsourcecode Agri-Trading Online Shopping System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/suppliercontroller.php. The manipulation of the argument supplier leads to sql injection. It is possible to launch the...

CVE-2025-7193

A vulnerability was found in itsourcecode Agri-Trading Online Shopping System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/suppliercontroller.php. The manipulation of the argument supplier leads to sql injection. It is possible to launch the...

CVE-2025-7193

A vulnerability was found in itsourcecode Agri-Trading Online Shopping System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/suppliercontroller.php. The manipulation of the argument supplier leads to sql injection. It is possible to launch the...

CVE-2025-7193

CVE-2025-7193 affects itsourcecode Agri-Trading Online Shopping System up to version 1.0. The vulnerability resides in an unknown function in the file /admin/suppliercontroller.php; manipulating the supplier argument leads to SQL injection that can be exploited remotely and has public exploit dis...

CVE-2025-7193 itsourcecode Agri-Trading Online Shopping System suppliercontroller.php sql injection

A vulnerability was found in itsourcecode Agri-Trading Online Shopping System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/suppliercontroller.php. The manipulation of the argument supplier leads to sql injection. It is possible to launch the...

CVE-2025-7193 itsourcecode Agri-Trading Online Shopping System suppliercontroller.php sql injection

A vulnerability was found in itsourcecode Agri-Trading Online Shopping System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/suppliercontroller.php. The manipulation of the argument supplier leads to sql injection. It is possible to launch the...

itsourcecode Agri-Trading Online Shopping System 注入漏洞

itsourcecode Agri-Trading Online Shopping System is itsourcecode open source an online shopping system . Itsourcecode Agri-Trading Online Shopping System 1.0 and earlier versions have an injection vulnerability, the vulnerability stems from improper manipulation of the parameter supplier in the...