Lucene search
+L

240 matches found

Kitploit
Kitploit
added 2026/09/04 7:21 p.m.3 views

CVE-2021-41649

CVE-2021-41649 CVE-2021-41649 online-shopping-system における SQL インジェクション online-shopping-system は、認証されていないエラーベース/ブールベースのブラインド SQL インジェクションおよびエラーベースの SQL インジェクション攻撃に対して脆弱です。 /homeaction.php ページの catid パラメータはユーザー入力をサニタイズしていないため、攻撃者は基盤となる MySQL データベースから機密データを抽出できます。 アプリケーションへのリンク online-shopping-syste...

9.8CVSS9.1AI score0.5177EPSS
SaveExploits2
CVE
CVE
added 2026/09/04 7:15 p.m.7 views

CVE-2026-85643

code-projects Online Shopping System 1.0 is vulnerable to SQL injection in the mysqli_query function within admin/adduser.php , via manipulation of the mobile argument. The attack is exploitable remotely but requires high privileges (authenticated admin access). CVSS 3.1 scores it 4.7 (MEDIUM) wi...

5.8CVSS4.8AI score
SaveExploits0References6
EUVD
EUVD
added 2026/09/04 7:15 p.m.4 views

EUVD-2026-71713

A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqliquery of the file admin/adduser.php. Executing a manipulation of the argument mobile can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used...

5.8CVSS4.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/04 1:11 p.m.5 views

CVE-2021-41648

CVE-2021-41648 CVE-2021-41648: online-shopping-system의 SQL 인젝션 online-shopping-system은 인증되지 않은 오류 기반/boolean 기반 블라인드 및 오류 기반 SQL 인젝션 공격에 취약합니다. /action.php 페이지의 proId 파라미터는 사용자 입력을 검증하지 않으므로, 공격자는 기본 MySQL 데이터베이스에서 민감한 데이터를 추출할 수 있습니다. 애플리케이션 링크 online-shopping-system 영향을 받는 구성 요소 및 파라미터 URL:...

7.5CVSS7.7AI score0.10169EPSS
SaveExploits4
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.3 views

PT-2026-86240

A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqli query of the file admin/adduser.php. Executing a manipulation of the argument mobile can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be use...

5.8CVSS4.8AI score
SaveExploits0References7
Nuclei
Nuclei
added 2026/09/03 2:10 a.m.78 views

PuneethReddyHC Online Shopping System homeaction.php SQL Injection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping System through the /homeaction.php catid parameter. Using a post request does not sanitize the user input. id: CVE-2021-41649 info: name: PuneethReddyHC Online Shopping System homeaction.php SQL Injection...

9.8CVSS7.3AI score0.5177EPSS
SaveExploits2References5
Kitploit
Kitploit
added 2026/09/03 1:34 a.m.3 views

CVE-2025-52021

CVE-2025-52021 — PuneethReddyHC / Online Shopping System Advanced v1.0의 시간 기반 블라인드 SQL 인젝션 CVE: CVE-2025-52021 제목: editproduct.php의 productid 매개변수를 통한 시간 기반 블라인드 SQL 인젝션 공급업체 / 저장소: PuneethReddyHC — https://github.com/PuneethReddyHC/online-shopping-system-advanced 영향받는 버전: 1.0 테스트 시점의 master 브랜치/...

9.8CVSS5.6AI score0.00309EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/02 10:54 a.m.3 views

CVE-2025-51970

CVE-2025-51970 CVE-2025-51970 - SQL-инъекция в Online Shopping System Advanced Краткое описание Критическая уязвимость SQL-инъекции обнаружена в проекте Online Shopping System Advanced от PuneethReddyHC. Дефект находится в action.php, который не выполняет должную санитизацию пользовательского вво...

7.7CVSS5.2AI score0.00249EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 9:39 a.m.5 views

CVE-2024-40498

CVE-2024-40498 Затронутое приложение online-shopping-system-advanced 1.0 https://github.com/PuneethReddyHC/online-shopping-system-advanced Описание Файл register.php обрабатывает регистрацию пользователей. В строке 117 POST-параметры "$address1" и $address2" не проходят очистку, в отличие от...

9.8CVSS5.2AI score0.01005EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 9:29 p.m.5 views

CVE-2025-61246

CVE-2025-61246 - 온라인 쇼핑 시스템의 SQL 인젝션 취약점 개요 이 저장소는 Online Shopping System PHP 애플리케이션에서 발견된 치명적인 SQL 인젝션 취약점인 CVE-2025-61246 에 대한 개념 증명PoC을 포함합니다. 이 취약점은 인증되지 않은 공격자가 시간 기반 블라인드 SQL 인젝션을 통해 임의의 SQL 명령을 실행할 수 있게 합니다. 취약점 세부 정보 CVE ID : CVE-2025-61246 취약점 유형 : SQL 인젝션시간 기반 블라인드 영향을 받는 구성 요소 :...

9.8CVSS5.6AI score0.00415EPSS
SaveExploits2
NVD
NVD
added 2026/08/31 3:18 p.m.9 views

CVE-2026-82701

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

7.5CVSS0.00263EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/31 2:17 p.m.8 views

CVE-2026-82700

A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription. The manipulation of the argument email results in cross site scripting. The attack may be perform...

5.3CVSS0.00273EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/31 2:15 p.m.12 views

CVE-2026-82701

A SQL injection vulnerability exists in the Search Functionality of code-projects Online Shopping System 1.0 , specifically in the keyword parameter of /action.php. An unauthenticated remote attacker can manipulate this argument to inject SQL, achieving low impact on confidentiality, integrity, a...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/31 2:15 p.m.6 views

EUVD-2026-68594

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/31 2:15 p.m.31 views

CVE-2026-82701 code-projects Online Shopping System Search Functionality action.php sql injection

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

7.5CVSS0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/31 2:00 p.m.6 views

EUVD-2026-68530

A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription. The manipulation of the argument email results in cross site scripting. The attack may be perform...

5.3CVSS4.5AI score0.00273EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/31 2:00 p.m.7 views

CVE-2026-82700

A cross-site scripting (XSS) vulnerability exists in the Newsletter Subscription component of code-projects Online Shopping System 1.0 , specifically in the file /offersmail.php . Manipulation of the email argument allows a remote, unauthenticated attacker to inject script, resulting in low impac...

5.3CVSS4.5AI score0.00273EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/25 9:18 p.m.7 views

CVE-2026-79793

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumitform.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has be...

5.3CVSS0.00443EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/25 9:00 p.m.37 views

CVE-2026-79793 code-projects Online Shopping System sumit_form.php cross site scripting

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumitform.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has be...

5.3CVSS0.00443EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/25 9:00 p.m.11 views

CVE-2026-79793

code-projects Online Shopping System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /admin/sumit_form.php , caused by insufficient input validation on the Success argument. The attack is remote and requires user interaction , but no authentication is needed. Impact is r...

5.3CVSS4.1AI score0.00443EPSS
SaveExploits0References6
Rows per page
Query Builder