4 matches found
CampCodes Online Shopping Portal /my-account.php File SQL Injection Vulnerability
CampCodes Online Shopping Portal is an online shopping portal from CampCodes, Inc. CampCodes Online Shopping Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Name in the file /my-account.php. An attacker...
PT-2025-21934 · Unknown · Campcodes Online Shopping Portal
Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical issue affects some unknown processing of the file /my-account.php. The manipulation of the argument Name leads to SQL injection. The attack may be initiated remotely. The...
CVE-2019-9062
PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery CSRF in my-account.php...
CVE-2019-9062
The CVE-2019-9062 entry concerns PHP Scripts Mall Online Food Ordering Script version 1.0, where a Cross-Site Request Forgery (CSRF) exists in my-account.php. The available connected documents corroborate a CSRF vulnerability in that file, enabling unauthorized state-changing requests. PT-2019-19...