CVE-2026-0586

A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file handgunner-administrator/prod.php. Performing a manipulation of the argument cat results in cross site scripting. The attack is possible to be carried out...

CVE-2026-0586: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file handgunner-administrator/prod.php. Performing a manipulation of the argument cat results in cross site scripting. The attack is possible to be carried out...

CVE-2025-0300

A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /subcat.php. The manipulation of the argument cat leads to sql injection. The attack can be launched remotely. The exploit has been...

PT-2025-10005

Name of the Vulnerable Software and Affected Versions s-a-zhd Ecommerce-Website-using-PHP version 1.0 Description A critical issue has been found in the software, affecting some unknown functionality of the file /shop.php. The manipulation of the p cat argument leads to SQL injection. This issue...

CVE-2025-0488: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Fanli2012 native-php-cms 1.0. This affects an unknown part of the file productlist.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

PT-2025-3820 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Book Shop version 1.0 Description: A critical issue was found in the code-projects Online Book Shop, affecting an unknown functionality of the file /subcat.php. The manipulation of the cat argument leads to SQL injection...

CVE-2025-0196: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file /user/plist.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The...

PT-2025-3769

Name of the Vulnerable Software and Affected Versions code-projects Point of Sales and Inventory Management System version 1.0 Description A critical vulnerability has been found in the system, affecting an unknown part of the file /user/plist.php. The manipulation of the cat argument leads to SQ...

CVE-2024-10996: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/processcategoryedit.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The...

PT-2024-30591

Name of the Vulnerable Software and Affected Versions osCommerce version 4 Description A problematic issue was found in osCommerce, affecting an unknown function of the file /catalog/all-products. The manipulation of the cat argument leads to cross-site scripting. It is possible to launch the...

CVE-2024-4348: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the file /catalog/all-products. The manipulation of the argument cat leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to t...