CVE-2021-41649

CVE-2021-41649 CVE-2021-41649 Injection SQL dans online-shopping-system Le online-shopping-system est vulnérable à des attaques par injection SQL non authentifiées, de type aveugle booléenne/erreur et basées sur les erreurs. Le paramètre catid de la page /homeaction.php ne filtre pas la saisie...

CVE-2021-41648

CVE-2021-41648 CVE-2021-41648 حقن SQL في نظام التسوق عبر الإنترنت نظام التسوق عبر الإنترنت عرضة لهجمات حقن SQL العمياء المستندة إلى الأخطاء/المنطقية غير المصادق عليها والهجمات المستندة إلى الأخطاء. لا يقوم معامل proId في صفحة /action.php بتطهير إدخال المستخدم، مما يسمح للمهاجم باستخراج بيانات حسا...

PuneethReddyHC Online Shopping System homeaction.php SQL Injection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping System through the /homeaction.php catid parameter. Using a post request does not sanitize the user input. id: CVE-2021-41649 info: name: PuneethReddyHC Online Shopping System homeaction.php SQL Injection...

CVE-2025-52021

CVE-2025-52021 — حقن SQL أعمى قائم على الوقت في PuneethReddyHC / نظام التسوق عبر الإنترنت المتقدم v1.0 CVE: CVE-2025-52021 العنوان: حقن SQL أعمى قائم على الوقت عبر معامل productid في editproduct.php البائع / المستودع: PuneethReddyHC —...

CVE-2025-51970

CVE-2025-51970 CVE-2025-51970 - حقن SQL في نظام التسوق عبر الإنترنت المتقدم ملخص تم اكتشاف ثغرة أمنية خطيرة من نوع حقن SQL في مشروع Online Shopping System Advanced بواسطة PuneethReddyHC. توجد الثغرة في action.php، الذي يفشل في تنقية إدخال المستخدم من معامل POST keyword بشكل صحيح. يمكن للمهاجم حقن...

CVE-2024-40498

CVE-2024-40498 प्रभावित अनुप्रयोग online-shopping-system-advanced 1.0 https://github.com/PuneethReddyHC/online-shopping-system-advanced विवरण फ़ाइल register.php उपयोगकर्ता पंजीकरण संभालती है। पंक्ति 117 पर, POST पैरामीटर "$address1" और $address2" सैनिटाइज़ नहीं किए गए हैं, ईमेल, नाम और नंबर के...

CVE-2025-61246

CVE-2025-61246 - ऑनलाइन शॉपिंग सिस्टम में SQL इंजेक्शन भेद्यता अवलोकन यह रिपॉजिटरी CVE-2025-61246 के लिए एक प्रूफ ऑफ कॉन्सेप्ट PoC है, जो ऑनलाइन शॉपिंग सिस्टम PHP एप्लिकेशन में पाई गई एक गंभीर SQL इंजेक्शन भेद्यता है। यह भेद्यता एक अप्रमाणित हमलावर को समय-आधारित ब्लाइंड SQL इंजेक्शन के माध्यम से...

CVE-2026-82701

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

CVE-2026-82700

A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription. The manipulation of the argument email results in cross site scripting. The attack may be perform...

EUVD-2026-68594

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

CVE-2026-82701

A SQL injection vulnerability exists in the Search Functionality of code-projects Online Shopping System 1.0 , specifically in the keyword parameter of /action.php. An unauthenticated remote attacker can manipulate this argument to inject SQL, achieving low impact on confidentiality, integrity, a...

CVE-2026-82701 code-projects Online Shopping System Search Functionality action.php sql injection

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

EUVD-2026-68530

A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription. The manipulation of the argument email results in cross site scripting. The attack may be perform...

CVE-2026-82700

A cross-site scripting (XSS) vulnerability exists in the Newsletter Subscription component of code-projects Online Shopping System 1.0 , specifically in the file /offersmail.php . Manipulation of the email argument allows a remote, unauthenticated attacker to inject script, resulting in low impac...

CVE-2026-79793

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumitform.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has be...

CVE-2026-79793 code-projects Online Shopping System sumit_form.php cross site scripting

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumitform.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has be...

CVE-2026-79793

code-projects Online Shopping System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /admin/sumit_form.php , caused by insufficient input validation on the Success argument. The attack is remote and requires user interaction , but no authentication is needed. Impact is r...

CVE-2026-19998

A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to...

EUVD-2026-60064

A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to...

CVE-2026-19998

A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to...