2 matches found
CVE-2025-6317
The CVE-2025-6317 issue affects code-projects Online Shoe Store 1.0, specifically the /admin/confirm.php file. The root cause is improper validation/manipulation of the ID parameter, enabling SQL injection that can be triggered remotely. Multiple connected sources describe this vulnerability and ...
Directory traversal
Directory traversal vulnerability in confirm.php in Netpet CMS 1.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...