Lucene search
+L

239 matches found

Kitploit
Kitploit
added 2026/09/04 7:21 p.m.3 views

CVE-2021-41649

CVE-2021-41649 CVE-2021-41649 Injection SQL dans online-shopping-system Le online-shopping-system est vulnérable à des attaques par injection SQL non authentifiées, de type aveugle booléenne/erreur et basées sur les erreurs. Le paramètre catid de la page /homeaction.php ne filtre pas la saisie...

9.8CVSS8.7AI score0.5177EPSS
SaveExploits2
CVE
CVE
added 2026/09/04 7:15 p.m.5 views

CVE-2026-85643

code-projects Online Shopping System 1.0 is vulnerable to SQL injection in the mysqli_query function within admin/adduser.php , via manipulation of the mobile argument. The attack is exploitable remotely but requires high privileges (authenticated admin access). CVSS 3.1 scores it 4.7 (MEDIUM) wi...

5.8CVSS4.8AI score
SaveExploits0References6
EUVD
EUVD
added 2026/09/04 7:15 p.m.3 views

EUVD-2026-71713

A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqliquery of the file admin/adduser.php. Executing a manipulation of the argument mobile can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used...

5.8CVSS4.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/04 1:11 p.m.5 views

CVE-2021-41648

CVE-2021-41648 CVE-2021-41648 Injection SQL dans online-shopping-system Le online-shopping-system est vulnérable aux attaques par injection SQL non authentifiées, de type aveugle booléenne/erreur et de type basé sur les erreurs. Le paramètre proId de la page /action.php ne nettoie pas les entrées...

7.5CVSS7.5AI score0.10169EPSS
SaveExploits4
Nuclei
Nuclei
added 2026/09/03 2:10 a.m.78 views

PuneethReddyHC Online Shopping System homeaction.php SQL Injection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping System through the /homeaction.php catid parameter. Using a post request does not sanitize the user input. id: CVE-2021-41649 info: name: PuneethReddyHC Online Shopping System homeaction.php SQL Injection...

9.8CVSS7.3AI score0.5177EPSS
SaveExploits2References5
Kitploit
Kitploit
added 2026/09/03 1:34 a.m.3 views

CVE-2025-52021

CVE-2025-52021 — Time-Based Blind SQL Injection в PuneethReddyHC / Online Shopping System Advanced v1.0 CVE: CVE-2025-52021 Название: Time-Based Blind SQL Injection через параметр productid в editproduct.php Вендор / Репозиторий: PuneethReddyHC —...

9.8CVSS5.2AI score0.00309EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/02 10:54 a.m.3 views

CVE-2025-51970

CVE-2025-51970 CVE-2025-51970 - Injection SQL dans Online Shopping System Advanced Résumé Une vulnérabilité critique d'injection SQL a été découverte dans le projet Online Shopping System Advanced par PuneethReddyHC. Le défaut se situe dans action.php, qui ne parvient pas à assainir correctement...

7.7CVSS5.2AI score0.00249EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 9:39 a.m.5 views

CVE-2024-40498

CVE-2024-40498 Затронутое приложение online-shopping-system-advanced 1.0 https://github.com/PuneethReddyHC/online-shopping-system-advanced Описание Файл register.php обрабатывает регистрацию пользователей. В строке 117 POST-параметры "$address1" и $address2" не проходят очистку, в отличие от...

9.8CVSS5.6AI score0.01005EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 9:29 p.m.5 views

CVE-2025-61246

CVE-2025-61246 - Уязвимость SQL-инъекции в системе онлайн-покупок Обзор Этот репозиторий содержит Proof of Concept PoC для CVE-2025-61246 — критической уязвимости SQL-инъекции, обнаруженной в PHP-приложении системы онлайн-покупок. Уязвимость позволяет неаутентифицированному злоумышленнику выполня...

9.8CVSS5.6AI score0.00415EPSS
SaveExploits2
NVD
NVD
added 2026/08/31 3:18 p.m.9 views

CVE-2026-82701

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

7.5CVSS0.00263EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/31 2:17 p.m.8 views

CVE-2026-82700

A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription. The manipulation of the argument email results in cross site scripting. The attack may be perform...

5.3CVSS0.00273EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/31 2:15 p.m.12 views

CVE-2026-82701

A SQL injection vulnerability exists in the Search Functionality of code-projects Online Shopping System 1.0 , specifically in the keyword parameter of /action.php. An unauthenticated remote attacker can manipulate this argument to inject SQL, achieving low impact on confidentiality, integrity, a...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/31 2:15 p.m.6 views

EUVD-2026-68594

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/31 2:15 p.m.31 views

CVE-2026-82701 code-projects Online Shopping System Search Functionality action.php sql injection

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

7.5CVSS0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/31 2:00 p.m.6 views

EUVD-2026-68530

A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription. The manipulation of the argument email results in cross site scripting. The attack may be perform...

5.3CVSS4.5AI score0.00273EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/31 2:00 p.m.7 views

CVE-2026-82700

A cross-site scripting (XSS) vulnerability exists in the Newsletter Subscription component of code-projects Online Shopping System 1.0 , specifically in the file /offersmail.php . Manipulation of the email argument allows a remote, unauthenticated attacker to inject script, resulting in low impac...

5.3CVSS4.5AI score0.00273EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/25 9:18 p.m.7 views

CVE-2026-79793

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumitform.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has be...

5.3CVSS0.00443EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/25 9:00 p.m.37 views

CVE-2026-79793 code-projects Online Shopping System sumit_form.php cross site scripting

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumitform.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has be...

5.3CVSS0.00443EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/25 9:00 p.m.11 views

CVE-2026-79793

code-projects Online Shopping System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /admin/sumit_form.php , caused by insufficient input validation on the Success argument. The attack is remote and requires user interaction , but no authentication is needed. Impact is r...

5.3CVSS4.1AI score0.00443EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/17 8:16 a.m.14 views

CVE-2026-19998

A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to...

5.3CVSS0.00347EPSS
SaveExploits0References6
Rows per page
Query Builder