Lucene search
+L

4987 matches found

Vulnrichment
Vulnrichment
added 2026/03/04 5:15 p.m.6 views

CVE-2019-25507 Ashop Shopping Cart Software Lastest SQL Injection via index.php

Ashop Shopping Cart Software contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'shop' parameter. Attackers can send GET requests to index.php with malicious 'shop' values using UNION-based SQL injection t...

8.8CVSS6AI score0.00237EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/04 12:00 a.m.15 views

Ashop Shopping Cart SQL注入漏洞

Ashop Shopping Cart is a e-commerce platform developed by the Ashop company. The Ashop Shopping Cart has a SQL injection vulnerability. This vulnerability stems from the shop parameter being subject to SQL injection attacks, which may allow unverified attackers to manipulate database queries and...

8.8CVSS5.8AI score0.00237EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/02/28 7:45 p.m.12 views

CVE-2019-25497

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shoppingcart.php with malicious currency values using boolean-based SQL injection...

8.8CVSS6AI score0.00327EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/02/27 6:31 p.m.9 views

EUVD-2019-19723

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shoppingcart.php with malicious currency values using boolean-based SQL injection...

8.8CVSS6AI score0.00327EPSS
SaveExploits1References4
NVD
NVD
added 2026/02/27 6:16 p.m.14 views

CVE-2019-25497

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shoppingcart.php with malicious currency values using boolean-based SQL injection...

8.8CVSS0.00327EPSS
SaveExploits1References3
OSV
OSV
added 2026/02/27 6:16 p.m.8 views

CVE-2019-25497

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shoppingcart.php with malicious currency values using boolean-based SQL injection...

7.5CVSS5.9AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/27 5:23 p.m.9 views

CVE-2019-25497 osCommerce 2.3.4.1 SQL Injection via currency Parameter

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shoppingcart.php with malicious currency values using boolean-based SQL injection...

8.8CVSS6AI score0.00327EPSS
SaveExploits1References3
CVE
CVE
added 2026/02/27 5:23 p.m.28 views

CVE-2019-25497

CVE-2019-25497 affects osCommerce 2.3.4.1, where an unauthenticated attacker can manipulate database queries via the currency parameter. The vulnerability enables SQL injection by sending crafted GET requests to shopping_cart.php with boolean-based payloads to extract data. Impact is indicated as...

8.8CVSS6AI score0.00327EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2026/02/27 5:23 p.m.32 views

CVE-2019-25497 osCommerce 2.3.4.1 SQL Injection via currency Parameter

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shoppingcart.php with malicious currency values using boolean-based SQL injection...

8.8CVSS0.00327EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/02/27 5:23 p.m.8 views

CVE-2019-25497

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shoppingcart.php with malicious currency values using boolean-based SQL injection...

8.8CVSS6AI score0.00327EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/27 12:00 a.m.14 views

PT-2026-22365

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shopping cart.php with malicious currency values using boolean-based SQL injectio...

8.8CVSS6AI score0.00327EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/02/26 4:16 a.m.11 views

CVE-2026-3148

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

9.8CVSS5.4AI score0.00399EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/02/25 6:31 a.m.10 views

EUVD-2026-8618

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

9.8CVSS5.4AI score0.00399EPSS
SaveExploits1References6
OSV
OSV
added 2026/02/25 5:17 a.m.8 views

CVE-2026-3148

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

9.8CVSS5.7AI score0.00399EPSS
SaveExploits1References5
NVD
NVD
added 2026/02/25 5:17 a.m.16 views

CVE-2026-3148

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

9.8CVSS0.00399EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/02/25 4:02 a.m.4 views

CVE-2026-3148 SourceCodester Simple and Nice Shopping Cart Script signup.php sql injection

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

7.5CVSS5.4AI score0.00399EPSS
SaveExploits1References5
CVE
CVE
added 2026/02/25 4:02 a.m.25 views

CVE-2026-3148

CVE-2026-3148 affects SourceCodester Simple and Nice Shopping Cart Script v1.0. A SQL injection vulnerability exists in an unknown function in /signup.php via manipulation of the Username argument, with remote exploitation and a publicly disclosed exploit. Multiple connected sources corroborate t...

9.8CVSS5.4AI score0.00399EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/25 4:02 a.m.7 views

CVE-2026-3148

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

9.8CVSS5.4AI score0.00399EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/02/25 4:02 a.m.35 views

CVE-2026-3148 SourceCodester Simple and Nice Shopping Cart Script signup.php sql injection

A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /signup.php. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

7.5CVSS0.00399EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/02/25 12:00 a.m.13 views

PT-2026-21868

Name of the Vulnerable Software and Affected Versions SourceCodester Simple and Nice Shopping Cart Script version 1.0 Description A SQL injection issue exists in SourceCodester Simple and Nice Shopping Cart Script 1.0. The issue is located in an unknown function within the /signup.php file...

9.8CVSS7AI score0.00399EPSS
SaveExploits1References12
Rows per page
Query Builder