Lucene search
+L

56 matches found

Cvelist
Cvelist
•added 2024/11/25 8:31 a.m.•43 views

CVE-2024-11663 Codezips E-Commerce Site search.php sql injection

A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The exploit has been disclose...

7.5CVSS0.00887EPSS
SaveExploits1References4
CVE
CVE
•added 2024/11/25 8:31 a.m.•88 views

CVE-2024-11663

Codezips E-Commerce Site 1.0 (search.php) is affected. The root cause is manipulation of the keywords argument, leading to an SQL injection vulnerability. The issue can be exploited remotely and has been publicly disclosed. Affected components: the search.php functionality; the vulnerability impa...

9.8CVSS7.5AI score0.00887EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/25 8:31 a.m.•16 views

CVE-2024-11663 Codezips E-Commerce Site search.php sql injection

A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The exploit has been disclose...

7.5CVSS7.4AI score0.00887EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/11/25 12:00 a.m.•21 views

PT-2024-17173 · Unknown · Codezips E-Commerce Site

Name of the Vulnerable Software and Affected Versions: Codezips E-Commerce Site version 1.0 Description: A critical issue was found in the file search.php, where the manipulation of the keywords argument leads to sql injection. The attack can be launched remotely. The exploit has been disclosed t...

9.8CVSS7.5AI score0.00887EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/25 12:00 a.m.•2 views

CVE-2024-11663: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The exploit has been disclose...

9.8CVSS7AI score0.00887EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/17 2:15 p.m.•35 views

CVE-2024-5049

A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack may be launched remotely...

8.8CVSS6.4AI score0.00688EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/05/17 2:00 p.m.•21 views

CVE-2024-5049 Codezips E-Commerce Site editproduct.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack may be launched remotely...

6.5CVSS6.9AI score0.00688EPSS
SaveExploits1References4
CVE
CVE
•added 2024/05/17 2:00 p.m.•73 views

CVE-2024-5049

CVE-2024-5049 affects Codezips E-Commerce Site 1.0. The vulnerability is in admin/editproduct.php where manipulating the profilepic parameter leads to unrestricted file upload, enabling remote abuse. The issue is tied to unknown functionality in the editproduct.php handling of profilepic, enablin...

8.8CVSS6.8AI score0.00688EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2024/05/17 12:00 a.m.•19 views

PT-2024-34267 · Unknown · Codezips E-Commerce Site

Name of the Vulnerable Software and Affected Versions: Codezips E-Commerce Site version 1.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file admin/editproduct.php. The manipulation of the profilepic argument leads to unrestricted uploa...

8.8CVSS6.6AI score0.00688EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/17 12:00 a.m.•5 views

CVE-2024-5049: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack may be launched remotely...

8.8CVSS5.4AI score0.00688EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/16 2:15 a.m.•37 views

CVE-2024-4923

A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/addproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

8.8CVSS6.5AI score0.00713EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/05/16 1:31 a.m.•23 views

CVE-2024-4923 Codezips E-Commerce Site addproduct.php unrestricted upload

A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/addproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

6.5CVSS7.1AI score0.00713EPSS
SaveExploits1References4
CVE
CVE
•added 2024/05/16 1:31 a.m.•68 views

CVE-2024-4923

Codezips E-Commerce Site 1.0 contains a vulnerability in admin/addproduct.php where manipulation of the profilepic parameter enables unrestricted file upload. This can be exploited remotely, and public exploit information exists. Impact per available data includes high confidentiality, integrity,...

8.8CVSS6.3AI score0.00713EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/05/16 1:31 a.m.•50 views

CVE-2024-4923 Codezips E-Commerce Site addproduct.php unrestricted upload

A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/addproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

6.5CVSS6.8AI score0.00713EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/05/16 12:00 a.m.•3 views

PT-2024-33366

Name of the Vulnerable Software and Affected Versions Codezips E-Commerce Site version 1.0 Description A critical issue has been found in the Codezips E-Commerce Site, affecting the file admin/addproduct.php. The manipulation of the profilepic argument leads to unrestricted upload. The attack can...

8.8CVSS5.5AI score0.00713EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/16 12:00 a.m.•2 views

CVE-2024-4923: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/addproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

8.8CVSS5.3AI score0.00713EPSS
SaveExploits1References1
Rows per page
Query Builder