Lucene search
K

12 matches found

Vulnrichment
Vulnrichment
added 2025/10/07 12:0 a.m.2 views

CVE-2025-52021

A SQL Injection vulnerability exists in the editproduct.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The productid GET parameter is unsafely passed to a SQL query without proper validation or parameterization...

7.5AI score0.00038EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/10/07 12:0 a.m.6 views

CVE-2025-52021

A SQL Injection vulnerability exists in the editproduct.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The productid GET parameter is unsafely passed to a SQL query without proper validation or parameterization...

0.00038EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-44440

Malicious code in bioql PyPI...

8.8CVSS7AI score0.00067EPSS
Exploits1References3
CVE
CVE
added 2025/07/27 5:32 p.m.12 views

CVE-2025-8236

CVE-2025-8236 concerns the code-projects Online Ordering System 1.0. Multiple connected sources confirm a SQL injection vulnerability in the file /admin/edit_product.php, triggered by manipulating the Name argument. The issue is described as remote-exploitable and publicly disclosed across CVE li...

9.8CVSS7.6AI score0.00204EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/07/17 8:32 p.m.8 views

CVE-2025-7755 code-projects Online Ordering System edit_product.php unrestricted upload

A vulnerability was found in code-projects Online Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/editproduct.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The explo...

6.5CVSS0.00293EPSS
Exploits1References5
NVD
NVD
added 2024/08/20 1:15 p.m.7 views

CVE-2024-42578

A Cross-Site Request Forgery CSRF in the component editproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8CVSS0.0034EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/08/20 12:0 a.m.10 views

CVE-2024-42578

A Cross-Site Request Forgery CSRF in the component editproduct.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

0.0034EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/07/25 6:0 a.m.14 views

CVE-2023-3884 Campcodes Beauty Salon Management System edit_product.php cross site scripting

A vulnerability has been found in Campcodes Beauty Salon Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/editproduct.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The...

4CVSS6.3AI score0.00286EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/07/25 6:0 a.m.9 views

CVE-2023-3884 Campcodes Beauty Salon Management System edit_product.php cross site scripting

A vulnerability has been found in Campcodes Beauty Salon Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/editproduct.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The...

4CVSS6.4AI score0.00286EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/07/21 2:31 a.m.16 views

CVE-2023-3807 Campcodes Beauty Salon Management System edit_product.php sql injection

A vulnerability has been found in Campcodes Beauty Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file editproduct.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

6.5CVSS9.2AI score0.00067EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/07/21 12:0 a.m.2 views

Campcodes Beauty Salon Management System SQL注入漏洞

Campcodes Beauty Salon Management System is a beauty salon management system from Campcodes, Inc. A SQL injection vulnerability exists in Campcodes Beauty Salon Management System version 1.0, which originates from an unknown function in the file editproduct.php, which results in an sql injection...

8.8CVSS7.1AI score0.00067EPSS
Exploits1References4
Cvelist
Cvelist
added 2023/06/30 6:31 a.m.11 views

CVE-2023-3473 Campcodes Retro Cellphone Online Store edit_product.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Retro Cellphone Online Store 1.0. Affected is an unknown function of the file /admin/editproduct.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The explo...

5.8CVSS10AI score0.00061EPSS
Exploits1References3
Rows per page
Query Builder