EUVD-2023-23958

Malicious code in bioql PyPI...

EUVD-2023-23733

Malicious code in bioql PyPI...

EUVD-2021-28686

Malicious code in bioql PyPI...

EUVD-2021-28687

Malicious code in bioql PyPI...

EUVD-2023-23956

Malicious code in bioql PyPI...

EUVD-2024-34538

Malicious code in bioql PyPI...

EUVD-2024-34555

Malicious code in bioql PyPI...

EUVD-2024-34537

Malicious code in bioql PyPI...

EUVD-2024-34557

Malicious code in bioql PyPI...

EUVD-2024-34558

Malicious code in bioql PyPI...

EUVD-2024-34556

Malicious code in bioql PyPI...

EUVD-2023-23960

Malicious code in bioql PyPI...

EUVD-2023-23957

Malicious code in bioql PyPI...

EUVD-2023-23914

Malicious code in bioql PyPI...

CVE-2021-41675

A Remote Code Execution RCE vulnerabilty exists in Sourcecodester E-Negosyo System 1.0 in /admin/produts/controller.php via the doInsert function, which validates images with getImageSizei...

CVE-2024-33957

SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'id' in '/admin/orders/controller.php' parameter...

CVE-2024-33958

SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'phonenumber' in '/passwordrecover.php' parameter...

CVE-2024-33978

Cross-Site Scripting XSS vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via 'category' parameter in '/index.php'...

CVE-2024-33975

Cross-Site Scripting XSS vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via 'view' parameter in '/admin/products/index.ph...

CVE-2024-33976

Cross-Site Scripting XSS vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via 'id' parameter in '/admin/user/index.php'...