29 matches found
CVE-2025-65341
Ecommerce Fruits Bazar 1.0 is vulnerable to Cross Site Scripting XSS in admin/editproduct.php...
CVE-2025-65336
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /showpricebypdtId.php...
EUVD-2025-210560
Ecommerce Fruits Bazar 1.0 is vulnerable to Cross Site Scripting XSS in admin/editproduct.php...
CVE-2025-65341
Ecommerce Fruits Bazar 1.0 is affected by a Cross Site Scripting (XSS) vulnerability in admin/edit_product.php. All connected sources identify the same issue but do not provide details on root cause, affected input handling, or specific versions beyond 1.0. No exploitation status or remediation i...
EUVD-2025-210561
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /showpricebypdtId.php...
CVE-2025-65336
The CVE-2025-65336 entry concerns the Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0, which is vulnerable to SQL Injection in the script /show_price_by_pdtId.php. The connected documents confirm the affected application and the vulnerability class but do not provide specifics on vulnerabl...
EUVD-2022-37887
Malicious code in bioql PyPI...
EUVD-2022-52362
Malicious code in bioql PyPI...
CVE-2022-34989
Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recoveremail parameter at userpasswordrecover.php...
CVE-2022-30478
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \searchproduct.php via the keyword parameters...
CVE-2022-34989
Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recoveremail parameter at userpasswordrecover.php...
CVE-2022-34989
Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recoveremail parameter at userpasswordrecover.php...
CVE-2022-34989
Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recoveremail parameter at userpasswordrecover.php...
Sql injection
Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recoveremail parameter at userpasswordrecover.php...
CVE-2022-34989
CVE-2022-34989 impacts Fruits Bazar v1.0, where a SQL injection vulnerability exists in the recover_email parameter of the table/user_password_recover.php. The NVD entry assigns a CVSS3.1 base score of 9.8 (CRITICAL) with network access, no user interaction, and no privileges required, affecting ...
CVE-2022-34989
Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recoveremail parameter at userpasswordrecover.php...
PT-2022-22473 · Unknown · Fruits Bazar
Name of the Vulnerable Software and Affected Versions: Fruits Bazar version 1.0 Description: A SQL injection issue was found in Fruits Bazar via the recover email parameter at the "user password recover.php" endpoint. Recommendations: For Fruits Bazar version 1.0, as a temporary workaround,...
Fruits-Bazar 2021 1.0 SQL Injection
Title: Fruits-Bazar 2021 v1.0 SQLi Author: nu11secur1ty Date: 06.29.2022 Vendor: https://github.com/creativesaiful Software: https://github.com/creativesaiful/Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- Reference:...
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar SQL Injection Vulnerability
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to SQL injection, which stems from The keyword parameter of the searchproduct.php page lacks validation for external input SQL statements. An...
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar Cross-Site Scripting Vulnerability
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar is an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to a cross-site scripting vulnerability that stems from The ctgname parameter on the adminaddcata.php page lacks a checksum filter for...