Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2026/01/06 1:13 p.m.•35 views

CVE-2026-0591

A vulnerability was identified in code-projects Online Product Reservation System 1.0. The impacted element is an unknown function of the file /app/checkout/update.php of the component Cart Update Handler. Such manipulation of the argument id/qty leads to sql injection. It is possible to launch t...

6.5CVSS7.2AI score0.00367EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/05 2:15 p.m.•26 views

CVE-2026-0591

A vulnerability was identified in code-projects Online Product Reservation System 1.0. The impacted element is an unknown function of the file /app/checkout/update.php of the component Cart Update Handler. Such manipulation of the argument id/qty leads to sql injection. It is possible to launch t...

9.8CVSS0.00367EPSS
SaveExploits1References6
OSV
OSV
•added 2026/01/05 2:15 p.m.•22 views

CVE-2026-0591

A vulnerability was identified in code-projects Online Product Reservation System 1.0. The impacted element is an unknown function of the file /app/checkout/update.php of the component Cart Update Handler. Such manipulation of the argument id/qty leads to sql injection. It is possible to launch t...

9.8CVSS5.7AI score0.00367EPSS
SaveExploits1References6
CVE
CVE
•added 2026/01/05 1:02 p.m.•48 views

CVE-2026-0591

Code-projects Online Product Reservation System 1.0 contains a SQL injection vulnerability in the Cart Update Handler, specifically in the /app/checkout/update.php file’s unknown function. Manipulating the id/qty parameter can trigger the injection, enabling remote exploitation. Public exploit/Po...

9.8CVSS6.5AI score0.00367EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/05 12:00 a.m.•7 views

CVE-2026-0591: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Online Product Reservation System 1.0. The impacted element is an unknown function of the file /app/checkout/update.php of the component Cart Update Handler. Such manipulation of the argument id/qty leads to sql injection. It is possible to launch t...

9.8CVSS6.5AI score0.00367EPSS
SaveExploits1References1
Rows per page
Query Builder