PT-2026-73068

Name of the Vulnerable Software and Affected Versions code-projects Online Shopping System version 1.0 Description A security flaw exists in the /checkout.php endpoint. A remote attacker can perform cross site scripting XSS—a technique used to inject malicious scripts into web pages viewed by oth...

CVE-2024-9089

CVE-2024-9089 affects SourceCodester Modern Loan Management System 1.0. The vulnerability is a cross-site scripting issue caused by manipulation of the amount parameter in update_loan_record.php. The attack can be initiated remotely, and the exploit has been disclosed publicly. Practical impact i...

CVE-2023-0998: Improper Access Control

A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file /alphaware/summary.php of the component Payment Handler. The manipulation of the argument amount leads to improper access controls. It is possib...