CVE-2024-13205 kurniaramadhan E-Commerce-PHP Create Product Page create_product.php cross site scripting

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/createproduct.php of the component Create Product Page. The manipulation of the argument Name leads to cross site scripting. Th...

CVE-2024-13205 kurniaramadhan E-Commerce-PHP Create Product Page create_product.php cross site scripting

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/createproduct.php of the component Create Product Page. The manipulation of the argument Name leads to cross site scripting. Th...

CVE-2024-13204 kurniaramadhan E-Commerce-PHP blog-details.php sql injection

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /blog-details.php. The manipulation of the argument blogid leads to sql injection. The attack can be launched remotely. The...

CVE-2024-13204

CVE-2024-13204 affects kurniaramadhan E-Commerce-PHP 1.0. The vulnerable component is the /blog-details.php file, where manipulating the blog_id parameter triggers a SQL injection. Exploitation is described as remote with the exploit publicly disclosed. Multiple sources corroborate the issue and ...

CVE-2024-13204 kurniaramadhan E-Commerce-PHP blog-details.php sql injection

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /blog-details.php. The manipulation of the argument blogid leads to sql injection. The attack can be launched remotely. The...

CVE-2024-13203

CVE-2024-13203 concerns the kurniaramadhan E-Commerce-PHP 1.0 application. The publicly provided records indicate a vulnerability in an unspecified function that enables cross-site request forgery (CSRF) and can be triggered remotely. The exact vulnerable component, affected versions beyond 1.0, ...

CVE-2024-13203 kurniaramadhan E-Commerce-PHP cross-site request forgery

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did...

CVE-2024-13203 kurniaramadhan E-Commerce-PHP cross-site request forgery

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did...

WordPress plugin Yumpu E-Paper publishing 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

E-Commerce-PHP 安全漏洞

E-Commerce-PHP is an e-commerce application using native PHP by the individual developer Kurnia Ramadhan Putra. A security vulnerability exists in E-Commerce-PHP version 1.0 that stems from vulnerability to cross-site request forgery attacks...

PT-2025-4734 · Wp E Commerce · Wpecommerce Sell Digital Downloads

Name of the Vulnerable Software and Affected Versions: wpecommerce Sell Digital Downloads versions 2.2.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-3836 · Unknown · Campcodes Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: CampCodes Computer Laboratory Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /class/edit/edit. The manipulation of the e photo argument leads to...

PT-2025-2061 · Unknown · Kurniaramadhan E-Commerce-Php

Name of the Vulnerable Software and Affected Versions: kurniaramadhan E-Commerce-PHP version 1.0 Description: A vulnerability was found in the software, classified as problematic. It affects an unknown function, leading to cross-site request forgery. The attack can be launched remotely. The vendo...

E-Commerce-PHP 注入漏洞

E-Commerce-PHP is an e-commerce application using native PHP by the individual developer Kurnia Ramadhan Putra. An injection vulnerability exists in E-Commerce-PHP version 1.0, which stems from the blogid parameter of the file /blog-details.php that causes SQL injection...

PT-2025-1918 · WordPress · Yumpu E-Paper

Name of the Vulnerable Software and Affected Versions: Yumpu E-Paper publishing plugin for WordPress versions up to, and including, 3.0.8 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'YUMPU' shortcode due to insufficient input sanitization and output escaping ...

PT-2025-2063 · Unknown · Kurniaramadhan E-Commerce-Php

Name of the Vulnerable Software and Affected Versions: kurniaramadhan E-Commerce-PHP version 1.0 Description: A problem was found in the Create Product Page component, specifically in the /admin/create product.php file. The issue is related to the manipulation of the Name argument, which leads to...

WordPress plugin CLUEVO LMS, E-Learning Platform 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blogs on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin CLUEVO LMS, E-Learning Platform...

PT-2025-2062 · Unknown · Kurniaramadhan E-Commerce-Php

Name of the Vulnerable Software and Affected Versions: kurniaramadhan E-Commerce-PHP version 1.0 Description: A critical issue affects an unknown functionality of the file /blog-details.php. The manipulation of the blog id argument leads to SQL injection. The attack can be launched remotely. The...

CVE-2024-12205

The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slider Widget in all versions up to, and including, 2.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2025-1680 · WordPress · Financial Stocks & Crypto Market Data Plugin

Name of the Vulnerable Software and Affected Versions: Financial Stocks & Crypto Market Data Plugin versions up to, and including, 1.10.3 Description: The issue is related to Reflected Cross-Site Scripting via the e parameter due to insufficient input sanitization and output escaping. This allows...