Lucene search
K

6 matches found

Cvelist
Cvelist
added 2025/09/17 8:32 p.m.6 views

CVE-2025-10616 itsourcecode E-Commerce Website users.php unrestricted upload

A security flaw has been discovered in itsourcecode E-Commerce Website 1.0. Affected is an unknown function of the file /admin/users.php. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit has been released to the public and may be exploited...

6.5CVSS0.00096EPSS
Exploits1References5
CVE
CVE
added 2025/09/17 8:32 p.m.10 views

CVE-2025-10616

The CVE-2025-10616 entry concerns itsourcecode E-Commerce Website 1.0. The vulnerable component is the file /admin/users.php where an unspecified manipulation yields an unrestricted upload. The vulnerability can be exploited remotely and the exploit has been released publicly. Other details in co...

8.8CVSS6.5AI score0.00096EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/17 12:0 a.m.4 views

PT-2025-38263

Name of the Vulnerable Software and Affected Versions: itsourcecode E-Commerce Website version 1.0 Description: A vulnerability exists in itsourcecode E-Commerce Website 1.0, impacting an unknown function within the /admin/products.php file. This allows for unrestricted file upload, and the attac...

6.5CVSS6.4AI score0.00096EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/05/23 10:30 a.m.5 views

CVE-2024-8139

A vulnerability has been found in itsourcecode E-Commerce Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file searchlist.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The exploit h...

9.8CVSS7.4AI score0.00124EPSS
Exploits1References1
NVD
NVD
added 2024/08/25 1:15 a.m.11 views

CVE-2024-8139

A vulnerability has been found in itsourcecode E-Commerce Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file searchlist.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The exploit h...

9.8CVSS0.00124EPSS
Exploits1References5
CVE
CVE
added 2024/08/25 1:0 a.m.47 views

CVE-2024-8139

CVE-2024-8139 affects itsourcecode E-Commerce Website 1.0. The issue is a SQL injection in the search_list.php logic triggered by manipulating the user parameter, exploitable remotely. Multiple connected sources confirm the vulnerability and public exploit disclosure. Remediation: upgrade to vers...

9.8CVSS6.8AI score0.00124EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder