CVE-2025-63879

A reflected cross-site scripted XSS vulnerability in the /ecommerce/products.php component of E-commerce Project v1.0 and earlier allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into the id parameter...

CVE-2025-63879

A reflected cross-site scripted XSS vulnerability in the /ecommerce/products.php component of E-commerce Project v1.0 and earlier allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into the id parameter...

CVE-2025-63879

A reflected cross-site scripted XSS vulnerability in the /ecommerce/products.php component of E-commerce Project v1.0 and earlier allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into the id parameter...

PHP-ECOMMERCE-PROJECT security vulnerabilities

PHP-ECOMMERCE-PROJECT is an e-commerce website by the individual developer MD RAHATUL RABBI. A security vulnerability exists in PHP-ECOMMERCE-PROJECT v1.0 and earlier versions, which originates from a reflected cross-site scripting in the id parameter of the /ecommerce/products.php component, whi...

CVE-2025-63879

The E-commerce Project (v1.0 and earlier) contains a reflected cross-site scripted (XSS) vulnerability within the /ecommerce/products.php component. An attacker can execute arbitrary JavaScript in a user's browser by injecting a crafted payload into the id parameter . This vulnerability is classi...

CVE-2025-63879

A reflected cross-site scripted XSS vulnerability in the /ecommerce/products.php component of E-commerce Project v1.0 and earlier allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into the id parameter...

PT-2025-47472

A reflected cross-site scripted XSS vulnerability in the /ecommerce/products.php component of E-commerce Project v1.0 and earlier allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into the id parameter...

EUVD-2022-52360

Malicious code in bioql PyPI...

CVE-2022-30482

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...

CVE-2022-30478

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \searchproduct.php via the keyword parameters...

CVE-2022-30478

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \searchproduct.php via the keyword parameters...

CVE-2022-30482

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar: SQL injection vulnerability

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to SQL injection, which stems from The keyword parameter of the searchproduct.php page lacks validation for external input SQL statements. An...

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar Cross-site Scripting Vulnerabilities

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar is an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to a cross-site scripting vulnerability that stems from The ctgname parameter on the adminaddcata.php page lacks a checksum filter for...

PT-2022-20136

Name of the Vulnerable Software and Affected Versions Ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 Description The issue concerns SQL Injection in the search product.php file via the keyword parameters. This allows for potential manipulation of database queries. Recommendations...

PT-2022-20138

Name of the Vulnerable Software and Affected Versions Ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 Description The issue concerns a Cross Site Scripting XSS problem. It occurs in the "admin/add cata.php" endpoint via the ctg name parameters. This allows for potential malicious...

CVE-2022-30482: Improper Neutralization of Input During Web Page Generation

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...