Lucene search
K

6 matches found

Cvelist
Cvelist
added 2025/04/27 3:31 p.m.18 views

CVE-2025-3975 ScriptAndTools eCommerce-website-in-PHP subscriber-csv.php information disclosure

A vulnerability was found in ScriptAndTools eCommerce-website-in-PHP 3.0 and classified as problematic. This issue affects some unknown processing of the file /admin/subscriber-csv.php. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been...

6.9CVSS0.00571EPSS
Exploits1References4
OSV
OSV
added 2025/04/14 8:15 a.m.1 views

CVE-2025-3556

A vulnerability classified as problematic was found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be...

8.1CVSS4.5AI score
Exploits0References4
NVD
NVD
added 2025/04/14 7:15 a.m.13 views

CVE-2025-3555

A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The...

8.1CVSS0.00357EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/04/14 12:0 a.m.4 views

eCommerce-website-in-PHP 安全漏洞

eCommerce-website-in-PHP is a free and open source php e-commerce platform by scriptandtools individual developers. A security vulnerability exists in eCommerce-website-in-PHP version 3.0, which stems from vulnerability to cross-site request forgery attacks...

5.3CVSS4.9AI score0.00185EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.1 views

E-Commerce-PHP 代码注入漏洞

E-Commerce-PHP is an e-commerce application using native PHP by the individual developer Kurnia Ramadhan Putra. A code injection vulnerability exists in E-Commerce-PHP version 1.0, which stems from the parameter Name in the file /admin/createproduct.php can lead to cross-site scripting attacks...

5.4CVSS4.3AI score0.00064EPSS
Exploits1References5
Packet Storm
Packet Storm
added 2024/08/02 12:0 a.m.343 views

ReadyMade Unilevel Ecommerce MLM Blind SQL Injection / Cross Site Scripting

x========================================================================================================================================x | Title : Readymade Unilevel Ecommerce MLM Blind SQL & XSS Vulnerabilities | Software : Readymade Unilevel Ecommerce | Last Update : 15/03/24 TESTED VERSION...

7.4AI score
Exploits0
Rows per page
Query Builder