CVE-2021-41649

CVE-2021-41649 CVE-2021-41649 SQL-инъекция в online-shopping-system online-shopping-system уязвим для неаутентифицированных атак SQL-инъекций: error-based, boolean-based blind и error-based. Параметр catid на странице /homeaction.php не санирует пользовательский ввод, поэтому злоумышленник может...

CVE-2021-41648

CVE-2021-41648 CVE-2021-41648 SQL-инъекция в онлайн-системе покупок Система онлайн-покупок уязвима для неаутентифицированных ошибок/логических слепых и основанных на ошибках SQL-инъекций. Параметр proId на странице /action.php не санирует пользовательский ввод, что позволяет злоумышленнику...

PuneethReddyHC Online Shopping System homeaction.php SQL Injection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping System through the /homeaction.php catid parameter. Using a post request does not sanitize the user input. id: CVE-2021-41649 info: name: PuneethReddyHC Online Shopping System homeaction.php SQL Injection...

CVE-2025-52021

CVE-2025-52021 — PuneethReddyHC / Online Shopping System Advanced v1.0의 시간 기반 블라인드 SQL 인젝션 CVE: CVE-2025-52021 제목: editproduct.php의 productid 매개변수를 통한 시간 기반 블라인드 SQL 인젝션 공급업체 / 저장소: PuneethReddyHC — https://github.com/PuneethReddyHC/online-shopping-system-advanced 영향받는 버전: 1.0 테스트 시점의 master 브랜치/...

CVE-2025-51970

CVE-2025-51970 CVE-2025-51970 - SQL-инъекция в Online Shopping System Advanced Краткое описание Критическая уязвимость SQL-инъекции обнаружена в проекте Online Shopping System Advanced от PuneethReddyHC. Дефект находится в action.php, который не выполняет должную санитизацию пользовательского вво...

CVE-2024-40498

CVE-2024-40498 Затронутое приложение online-shopping-system-advanced 1.0 https://github.com/PuneethReddyHC/online-shopping-system-advanced Описание Файл register.php обрабатывает регистрацию пользователей. В строке 117 POST-параметры "$address1" и $address2" не проходят очистку, в отличие от...

CVE-2025-61246

CVE-2025-61246 - Уязвимость SQL-инъекции в системе онлайн-покупок Обзор Этот репозиторий содержит Proof of Concept PoC для CVE-2025-61246 — критической уязвимости SQL-инъекции, обнаруженной в PHP-приложении системы онлайн-покупок. Уязвимость позволяет неаутентифицированному злоумышленнику выполня...

CVE-2026-82701

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

CVE-2026-82700

A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription. The manipulation of the argument email results in cross site scripting. The attack may be perform...

EUVD-2026-68594

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

CVE-2026-82701

A SQL injection vulnerability exists in the Search Functionality of code-projects Online Shopping System 1.0 , specifically in the keyword parameter of /action.php. An unauthenticated remote attacker can manipulate this argument to inject SQL, achieving low impact on confidentiality, integrity, a...

CVE-2026-82701 code-projects Online Shopping System Search Functionality action.php sql injection

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

EUVD-2026-68530

A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription. The manipulation of the argument email results in cross site scripting. The attack may be perform...

CVE-2026-82700

A cross-site scripting (XSS) vulnerability exists in the Newsletter Subscription component of code-projects Online Shopping System 1.0 , specifically in the file /offersmail.php . Manipulation of the email argument allows a remote, unauthenticated attacker to inject script, resulting in low impac...

CVE-2026-79793

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumitform.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has be...

CVE-2026-79793 code-projects Online Shopping System sumit_form.php cross site scripting

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumitform.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has be...

CVE-2026-79793

code-projects Online Shopping System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /admin/sumit_form.php , caused by insufficient input validation on the Success argument. The attack is remote and requires user interaction , but no authentication is needed. Impact is r...

CVE-2026-19998

A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to...

EUVD-2026-60064

A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to...

CVE-2026-19998

A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to...