Lucene search
K

630 matches found

NVD
NVD
added 2024/10/03 3:15 p.m.7 views

CVE-2024-9460

A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

9.8CVSS0.00054EPSS
Exploits0References4
OSV
OSV
added 2024/10/03 3:15 p.m.1 views

CVE-2024-9460

A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

9.8CVSS5.8AI score0.00054EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/10/03 2:31 p.m.17 views

CVE-2024-9460 Codezips Online Shopping Portal index.php sql injection

A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

7.5CVSS0.00054EPSS
Exploits0References4
CVE
CVE
added 2024/10/03 2:31 p.m.40 views

CVE-2024-9460

CVE-2024-9460 affects Codezips Online Shopping Portal 1.0. an SQL injection via the username argument in an unknown function of index.php is reported, with remote exploitation and public disclosure. Multiple sources confirm the risk is due to improper handling of the username parameter leading to...

9.8CVSS7.7AI score0.00054EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/03 2:31 p.m.10 views

CVE-2024-9460 Codezips Online Shopping Portal index.php sql injection

A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

7.5CVSS7.5AI score0.00054EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/10/03 12:0 a.m.1 views

Codezips Online Shopping Portal SQL注入漏洞

Codezips Online Shopping Portal is a Codezips open source online store system. A SQL injection vulnerability exists in Codezips Online Shopping Portal version 1.0, which stems from an incorrect operation of the username parameter that can lead to sql injection...

9.8CVSS8.4AI score0.00054EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/10/03 12:0 a.m.1 views

PT-2024-39648 · Unknown · Codezips Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Codezips Online Shopping Portal version 1.0 Description: A critical issue has been found in the software, allowing for SQL injection through the manipulation of the username argument in an unknown function of the file index.php. This can be...

9.8CVSS8AI score0.00054EPSS
Exploits0References11
OSV
OSV
added 2024/09/20 4:15 p.m.1 views

CVE-2024-9038

A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attac...

9.8CVSS5AI score
Exploits0References4
NVD
NVD
added 2024/09/20 4:15 p.m.14 views

CVE-2024-9037

A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

7.5CVSS0.0009EPSS
Exploits1References4
NVD
NVD
added 2024/09/20 4:15 p.m.13 views

CVE-2024-9038

A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attac...

9.8CVSS0.00185EPSS
Exploits1References4
OSV
OSV
added 2024/09/20 4:15 p.m.1 views

CVE-2024-9037

A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.9CVSS5.7AI score
Exploits0References4
Cvelist
Cvelist
added 2024/09/20 4:0 p.m.17 views

CVE-2024-9038 Codezips Online Shopping Portal insert-product.php unrestricted upload

A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attac...

5.3CVSS0.00185EPSS
Exploits1References4
CVE
CVE
added 2024/09/20 4:0 p.m.71 views

CVE-2024-9038

CVE-2024-9038 affects Codezips Online Shopping Portal 1.0, specifically the insert-product.php functionality. The vulnerability arises from manipulating the productimage1/productimage2/productimage3 parameters, enabling unrestricted file upload. This remote attack has had its exploit disclosed pu...

9.8CVSS5.2AI score0.00185EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/20 4:0 p.m.13 views

CVE-2024-9038 Codezips Online Shopping Portal insert-product.php unrestricted upload

A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attac...

5.3CVSS4.8AI score0.00185EPSS
Exploits1References4
CVE
CVE
added 2024/09/20 3:31 p.m.50 views

CVE-2024-9037

CVE-2024-9037 affects Codezips Internal Marks Calculation 1.0. The vulnerability is an SQL injection in an unknown function of the file index.php triggered by manipulating the tid parameter, allowing remote execution of queries. Multiple sources (NVD, Red Hat, CVE list, and others) confirm a crit...

7.5CVSS7.6AI score0.0009EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/20 3:31 p.m.10 views

CVE-2024-9037 Codezips Internal Marks Calculation index.php sql injection

A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

7.5CVSS7.4AI score0.0009EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/09/20 3:31 p.m.9 views

CVE-2024-9037 Codezips Internal Marks Calculation index.php sql injection

A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

7.5CVSS0.0009EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/09/20 12:0 a.m.2 views

Codezips Online Shopping Portal 代码问题漏洞

Codezips Online Shopping Portal is a Codezips open source online store system. A code issue vulnerability exists in Codezips Online Shopping Portal version 1.0 due to an unrestricted upload of parameters productimage1/productimage2/productimage3...

9.8CVSS5.2AI score0.00185EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/09/20 12:0 a.m.1 views

Codezips Internal Marks Calculation SQL注入漏洞

Codezips Internal Marks Calculation is a Codezips open source student portal built with PHP. A SQL injection vulnerability exists in Codezips Internal Marks Calculation version 1.0, which stems from an SQL injection in the parameter tid...

7.5CVSS7.9AI score0.0009EPSS
Exploits1References6
OSV
OSV
added 2024/05/17 2:15 p.m.1 views

CVE-2024-5049

A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack may be launched remotely...

8.8CVSS6.2AI score
Exploits0References4
Rows per page
Query Builder