EUVD-2022-34923

Malicious code in bioql PyPI...

EUVD-2022-0658

Malicious code in bioql PyPI...

EUVD-2023-55580

Malicious code in bioql PyPI...

EUVD-2023-46350

Malicious code in bioql PyPI...

EUVD-2025-21641

Malicious code in bioql PyPI...

EUVD-2023-59292

Malicious code in bioql PyPI...

EUVD-2023-0442

Malicious code in bioql PyPI...

EUVD-2024-51111

Malicious code in bioql PyPI...

EUVD-2025-17524

Malicious code in bioql PyPI...

CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

Yoshop 安全漏洞

Yoshop is a Chinese yiovo open source e-commerce system. A security vulnerability exists in Yoshop version 2.0, which originates from unvalidated goodsIds parameter and may lead to SQL injection attack...

Neto E-Commerce CMS 安全漏洞

Neto E-Commerce CMS is an e-commerce content management system from Neto Australia. A security vulnerability exists in Neto E-Commerce CMS versions 6.313.0 through 6.3115, which stems from the presence of cross-site scripting in the kw parameter, which could lead to elevation of privilege...

PT-2025-40282

Name of the Vulnerable Software and Affected Versions Neto E-Commerce CMS versions 6.313.0 through 6.3115 Description A Cross Site Scripting issue exists in Neto E-Commerce CMS. This allows a remote attacker to potentially escalate privileges. The issue is related to the kw parameter...

CVE-2024-57494

Summary (CVE-2024-57494) : Neto E-Commerce CMS versions 6.313.0 through 6.3115 contain a cross-site scripting (XSS) vulnerability in the kw parameter that can be exploited by a remote attacker to escalate privileges. The issue is confirmed across multiple feeds (Red Hat, NVD, CVE List, CNNVD) wit...

CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

E-Commerce Website admin_account_update.php file SQL injection vulnerability

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter userid in the file /pages/adminaccountupdate.php. An attacker can exploit this vulnerabili...

CVE-2025-11094

A security vulnerability has been detected in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/adminproductdetails.php. Such manipulation of the argument prodid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicl...

CVE-2025-11094

A security vulnerability has been detected in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/adminproductdetails.php. Such manipulation of the argument prodid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicl...

CVE-2025-11094 code-projects E-Commerce Website admin_product_details.php sql injection

A security vulnerability has been detected in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/adminproductdetails.php. Such manipulation of the argument prodid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicl...