Lucene search
+L

3026 matches found

NVD
NVD
added 2025/09/28 4:15 a.m.10 views

CVE-2025-11094

A security vulnerability has been detected in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/adminproductdetails.php. Such manipulation of the argument prodid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicl...

9.8CVSS0.00374EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/09/28 3:32 a.m.19 views

CVE-2025-11094 code-projects E-Commerce Website admin_product_details.php sql injection

A security vulnerability has been detected in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/adminproductdetails.php. Such manipulation of the argument prodid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicl...

7.5CVSS0.00374EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/09/28 12:0 a.m.11 views

PT-2025-39756

Name of the Vulnerable Software and Affected Versions code-projects E-Commerce Website version 1.0 Description A security issue exists in code-projects E-Commerce Website 1.0. The issue involves SQL injection within the file /pages/admin product details.php. Manipulation of the prod id argument c...

9.8CVSS7.4AI score0.00374EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
added 2025/09/27 7:33 p.m.26 views

CVE-2025-11037

A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/adminindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack may be initiated remotely. The exploit has been released to th...

7.5CVSS7AI score0.00465EPSS
SaveExploits1References1
OSV
OSV
added 2025/09/26 7:15 p.m.6 views

CVE-2025-11037

A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/adminindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack may be initiated remotely. The exploit has been released to th...

9.8CVSS5.8AI score0.00465EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/26 7:15 p.m.13 views

CVE-2025-11036

A vulnerability was identified in code-projects E-Commerce Website 1.0. This affects an unknown function of the file /pages/adminaccountupdate.php. Such manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be...

9.8CVSS0.00465EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/26 7:2 p.m.5 views

CVE-2025-11037 code-projects E-Commerce Website admin_index_search.php sql injection

A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/adminindexsearch.php. Performing manipulation of the argument Search results in sql injection. The attack may be initiated remotely. The exploit has been released to th...

7.5CVSS6.7AI score0.00465EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/26 7:2 p.m.22 views

CVE-2025-11037

CVE-2025-11037 affects code-projects E-Commerce Website 1.0. The vulnerability is an SQL injection in the parameter Search within the file /pages/admin_index_search.php caused by lack of validation of externally provided SQL statements. It is exploitable remotely and has been publicly released. M...

9.8CVSS6.7AI score0.00465EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/26 12:0 a.m.20 views

PT-2025-39677

Name of the Vulnerable Software and Affected Versions code-projects E-Commerce Website version 1.0 Description A security flaw exists in code-projects E-Commerce Website 1.0. The issue involves the manipulation of the Search argument in the file /pages/admin index search.php, leading to a SQL...

7.5CVSS7.2AI score0.00465EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/09/26 12:0 a.m.12 views

Code-Projects E-Commerce Website SQL注入漏洞

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter userid in the file /pages/adminaccountupdate.php. An attacker can exploit this vulnerabili...

9.8CVSS8.2AI score0.00465EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/09/24 10:32 a.m.17 views

CVE-2025-10793

A vulnerability was detected in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/adminaccountdelete.php. Performing manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS7AI score0.00543EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/24 9:23 a.m.14 views

CVE-2025-8079

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. Smart Trade E-Commerce allows Reflected XSS.This issue affects Smart Trade E-Commerce: before 4.5.0.0.1...

4.6CVSS6.5AI score0.00223EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/22 10:15 a.m.7 views

CVE-2025-10793

A vulnerability was detected in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/adminaccountdelete.php. Performing manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS0.00543EPSS
SaveExploits1References5
OSV
OSV
added 2025/09/22 10:15 a.m.5 views

CVE-2025-10793

A vulnerability was detected in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/adminaccountdelete.php. Performing manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS5.8AI score0.00543EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/22 10:2 a.m.7 views

CVE-2025-10793 code-projects E-Commerce Website admin_account_delete.php sql injection

A vulnerability was detected in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/adminaccountdelete.php. Performing manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS6.8AI score0.00543EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/22 10:2 a.m.18 views

CVE-2025-10793 code-projects E-Commerce Website admin_account_delete.php sql injection

A vulnerability was detected in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/adminaccountdelete.php. Performing manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS0.00543EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/22 10:2 a.m.27 views

CVE-2025-10793

CVE-2025-10793 affects code-projects E-Commerce Website 1.0. The vulnerability stems from improper validation/sanitization of the user_id argument in the file /pages/admin_account_delete.php, enabling a remotely exploitable SQL injection. Public exploits exist and attackers can leverage this to e...

9.8CVSS7.3AI score0.00543EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2025/09/22 9:15 a.m.7 views

CVE-2025-8079

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. Smart Trade E-Commerce allows Reflected XSS. This issue affects Smart Trade E-Commerce: before 4.5.0.0.1...

4.6CVSS0.00223EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/22 8:45 a.m.15 views

CVE-2025-8079 Reflected XSS in Akıllı Ticaret Software Technologies' Smart Trade E-Commerce

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. Smart Trade E-Commerce allows Reflected XSS. This issue affects Smart Trade E-Commerce: before 4.5.0.0.1...

4.6CVSS0.00223EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/22 8:45 a.m.16 views

CVE-2025-8079

CVE-2025-8079 concerns Akıllı Ticaret Software Technologies Ltd. Co. Smart Trade E-Commerce, with a vulnerability prior to version 4.5.0.0.1: improper neutralization of input during web page generation that leads to Reflected XSS. The issue affects Smart Trade E-Commerce before 4.5.0.0.1 and is d...

4.6CVSS5.4AI score0.00223EPSS
SaveExploits0References2
Rows per page
Query Builder