Lucene search
+L

3090 matches found

Vulnrichment
Vulnrichment
•added 2025/03/06 6:31 p.m.•9 views

CVE-2025-2036 s-a-zhd Ecommerce-Website-using-PHP details.php sql injection

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0. It has been classified as critical. This affects an unknown part of the file details.php. The manipulation of the argument proid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS7.6AI score0.00543EPSS
SaveExploits1References4
Mend
Mend
•added 2025/03/06 6:31 p.m.•2 views

CVE-2025-2036

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0. It has been classified as critical. This affects an unknown part of the file details.php. The manipulation of the argument proid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS0.00543EPSS
SaveExploits1References4
CVE
CVE
•added 2025/03/06 6:31 p.m.•84 views

CVE-2025-2036

CVE-2025-2036 affects the s-a-zhd Ecommerce-Website-using-PHP 1.0. The vulnerability is an SQL injection in the details.php file via the pro_id parameter, which can be triggered remotely. The exploitation method is disclosed publicly in the linked records, and multiple sources classify the impact...

9.8CVSS7.6AI score0.00543EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2025/03/06 6:15 p.m.•10 views

CVE-2025-2035

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /customerregister.php. The manipulation of the argument name leads to unrestricted upload. The attack may be launched remotely. The...

9.8CVSS6.3AI score0.00572EPSS
SaveExploits1References4
NVD
NVD
•added 2025/03/06 6:15 p.m.•15 views

CVE-2025-2035

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /customerregister.php. The manipulation of the argument name leads to unrestricted upload. The attack may be launched remotely. The...

9.8CVSS0.00572EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/03/06 6:00 p.m.•27 views

CVE-2025-2035 s-a-zhd Ecommerce-Website-using-PHP customer_register.php unrestricted upload

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /customerregister.php. The manipulation of the argument name leads to unrestricted upload. The attack may be launched remotely. The...

6.5CVSS0.00572EPSS
SaveExploits1References4
Mend
Mend
•added 2025/03/06 6:00 p.m.•4 views

CVE-2025-2035

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /customerregister.php. The manipulation of the argument name leads to unrestricted upload. The attack may be launched remotely. The...

9.8CVSS0.00572EPSS
SaveExploits1References4
CVE
CVE
•added 2025/03/06 6:00 p.m.•66 views

CVE-2025-2035

CVE-2025-2035 affects s-a-zhd Ecommerce-Website-using-PHP 1.0. The vulnerability is in /customer_register.php where manipulation of the argument name enables unrestricted upload. The issue can be exploited remotely, and the exploit has been disclosed publicly. No remediation details are provided ...

9.8CVSS7.1AI score0.00572EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/06 6:00 p.m.•10 views

CVE-2025-2035 s-a-zhd Ecommerce-Website-using-PHP customer_register.php unrestricted upload

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /customerregister.php. The manipulation of the argument name leads to unrestricted upload. The attack may be launched remotely. The...

6.5CVSS7.1AI score0.00572EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/03/06 12:00 a.m.•3 views

PT-2025-9989

Name of the Vulnerable Software and Affected Versions Ecommerce-Website-using-PHP version 1.0 Description A critical issue has been found, affecting an unknown part of the file details.php. The manipulation of the pro id argument leads to SQL injection. It is possible to initiate the attack...

9.8CVSS0.00543EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2025/03/06 12:00 a.m.•3 views

PT-2025-9987

Name of the Vulnerable Software and Affected Versions s-a-zhd Ecommerce-Website-using-PHP version 1.0 Description A critical issue was found in the software, affecting some unknown functionality of the file /customer register.php. The manipulation of the name argument leads to unrestricted upload...

9.8CVSS0.00572EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2025/03/06 12:00 a.m.•6 views

PT-2025-10005

Name of the Vulnerable Software and Affected Versions s-a-zhd Ecommerce-Website-using-PHP version 1.0 Description A critical issue has been found in the software, affecting some unknown functionality of the file /shop.php. The manipulation of the p cat argument leads to SQL injection. This issue...

9.8CVSS0.00543EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/06 12:00 a.m.•4 views

CVE-2025-2035: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /customerregister.php. The manipulation of the argument name leads to unrestricted upload. The attack may be launched remotely. The...

9.8CVSS6.3AI score0.00572EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/06 12:00 a.m.•17 views

Ecommerce-Website 注入漏洞

Ecommerce-Website is a complete e-commerce website with an administration panel built using PHP and MySql. An injection vulnerability exists in Ecommerce-Website version 1.0, which stems from an incorrect operation of the parameter proid that can lead to SQL injection...

9.8CVSS7.2AI score0.00543EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/06 12:00 a.m.•4 views

CVE-2025-2041: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in s-a-zhd Ecommerce-Website-using-PHP 1.0. Affected by this issue is some unknown functionality of the file /shop.php. The manipulation of the argument pcat leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS6.4AI score0.00543EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/06 12:00 a.m.•2 views

CVE-2025-2036: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0. It has been classified as critical. This affects an unknown part of the file details.php. The manipulation of the argument proid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS6.5AI score0.00543EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•17 views

zz 代码问题漏洞

zz is an e-commerce platform for zj1983 individual developers. A security vulnerability exists in zz 2024-8 and earlier versions, which stems from a server-side request forgery in the importdatacheck file...

8.8CVSS6.5AI score0.00526EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•16 views

zz 代码问题漏洞

zz is an e-commerce platform for zj1983 individual developers. A security vulnerability exists in zz 2024-8 and earlier versions, which stems from a server-side request forgery in the importdatatodb file...

8.8CVSS6.5AI score0.00526EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/03/02 12:00 a.m.•18 views

zz 注入漏洞

zz is an e-commerce platform by the individual developer of zj1983. An injection vulnerability exists in zj1983 zz 2024-8 and prior versions, which stems from SQL injection and could lead to remote code execution...

8.8CVSS7.4AI score0.00543EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/02/28 12:00 a.m.•5 views

PT-2025-9060

Name of the Vulnerable Software and Affected Versions Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons plugin for WordPress versions up to, and including, 26.0.0.1 Description The issue is related to Stor...

7.2CVSS0.0028EPSS
SaveExploits0References12
Rows per page
Query Builder