Lucene search
+L

243 matches found

Kitploit
Kitploit
added 2026/09/12 1:08 p.m.5 views

CVE-2021-41648

CVE-2021-41648 CVE-2021-41648 SQL-инъекция в онлайн-системе покупок Система онлайн-покупок уязвима для неаутентифицированных ошибок/логических слепых и основанных на ошибках SQL-инъекций. Параметр proId на странице /action.php не санирует пользовательский ввод, что позволяет злоумышленнику...

7.5CVSS7.4AI score0.10169EPSS
SaveExploits4
Nuclei
Nuclei
added 2026/09/12 2:04 a.m.79 views

PuneethReddyHC Online Shopping System homeaction.php SQL Injection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping System through the /homeaction.php catid parameter. Using a post request does not sanitize the user input. id: CVE-2021-41649 info: name: PuneethReddyHC Online Shopping System homeaction.php SQL Injection...

9.8CVSS8AI score0.5177EPSS
SaveExploits2References5
Kitploit
Kitploit
added 2026/09/11 7:18 p.m.4 views

CVE-2021-41649

CVE-2021-41649 CVE-2021-41649 online-shopping-system의 SQL 인젝션 online-shopping-system은 인증되지 않은 오류/boolean 기반 블라인드 및 오류 기반 SQL 인젝션 공격에 취약합니다. /homeaction.php 페이지의 catid 매개변수는 사용자 입력을 검증하지 않으며, 공격자는 기본 MySQL 데이터베이스에서 민감한 데이터를 추출할 수 있습니다. 애플리케이션 링크 online-shopping-system 영향받는 구성 요소 및 매개변수 URL:...

9.8CVSS8.1AI score0.5177EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 11:44 a.m.6 views

CVE-2025-61246

CVE-2025-61246 - 在线购物系统 SQL 注入漏洞 概述 本仓库包含 CVE-2025-61246 的概念验证(PoC),该漏洞是 PHP 在线购物系统应用程序中发现的严重 SQL 注入漏洞。攻击者可通过时间盲注利用该漏洞执行任意 SQL 命令。 漏洞详情 CVE ID :CVE-2025-61246 漏洞类型 :SQL 注入(时间盲注) 受影响组件 :/online-shopping-system-php-master/reviewaction.php 受影响版本 :1.0 易受攻击参数 :proId 攻击向量...

9.8CVSS5.9AI score0.0044EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/09/10 1:03 a.m.4 views

CVE-2025-52021

CVE-2025-52021 — PuneethReddyHC / Online Shopping System Advanced v1.0의 시간 기반 블라인드 SQL 인젝션 CVE: CVE-2025-52021 제목: editproduct.php의 productid 매개변수를 통한 시간 기반 블라인드 SQL 인젝션 공급업체 / 저장소: PuneethReddyHC — https://github.com/PuneethReddyHC/online-shopping-system-advanced 영향받는 버전: 1.0 테스트 시점의 master 브랜치/...

9.8CVSS5.9AI score0.00331EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/09 10:54 a.m.5 views

CVE-2025-51970

CVE-2025-51970 CVE-2025-51970 - 온라인 쇼핑 시스템 Advanced에서의 SQL 인젝션 요약 Online Shopping System Advanced 프로젝트PuneethReddyHC 개발에서 심각한 SQL 인젝션 취약점이 발견되었습니다. 이 결함은 action.php에 있으며, keyword POST 매개변수에서 사용자 입력을 제대로 살균하지 못합니다. 공격자는 악성 SQL을 주입하여 데이터를 추출하거나 데이터베이스를 조작할 수 있습니다. 기술 세부 사항 취약점 유형 : SQL 인젝션 영향 받는 파일...

7.7CVSS6AI score0.00249EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 9:39 a.m.7 views

CVE-2024-40498

CVE-2024-40498 영향을 받는 애플리케이션 online-shopping-system-advanced 1.0 https://github.com/PuneethReddyHC/online-shopping-system-advanced 설명 파일 register.php는 사용자 등록을 처리합니다. 117번째 줄에서 POST 매개변수 "$address1" 및 $address2"는 이메일, 이름 및 번호와 달리 검증되지 않아 VALUES 문 평가 중 SQL 인젝션이 발생합니다. 취약점을 악용하려면 "register.php" 파일에...

9.8CVSS6AI score0.01005EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/04 8:17 p.m.5 views

CVE-2026-85643

A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqliquery of the file admin/adduser.php. Executing a manipulation of the argument mobile can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used...

5.8CVSS0.0021EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/04 7:15 p.m.33 views

CVE-2026-85643 code-projects Online Shopping System adduser.php mysqli_query sql injection

A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqliquery of the file admin/adduser.php. Executing a manipulation of the argument mobile can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used...

5.8CVSS0.0021EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/04 7:15 p.m.11 views

CVE-2026-85643

code-projects Online Shopping System 1.0 is vulnerable to SQL injection in the mysqli_query function within admin/adduser.php , via manipulation of the mobile argument. The attack is exploitable remotely but requires high privileges (authenticated admin access). CVSS 3.1 scores it 4.7 (MEDIUM) wi...

5.8CVSS4.8AI score0.0021EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/04 7:15 p.m.8 views

EUVD-2026-71713

A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqliquery of the file admin/adduser.php. Executing a manipulation of the argument mobile can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used...

5.8CVSS4.8AI score0.0021EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.10 views

PT-2026-86240

A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqli query of the file admin/adduser.php. Executing a manipulation of the argument mobile can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be use...

5.8CVSS4.8AI score0.0021EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/31 3:18 p.m.12 views

CVE-2026-82701

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

7.5CVSS0.00263EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/31 2:17 p.m.10 views

CVE-2026-82700

A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription. The manipulation of the argument email results in cross site scripting. The attack may be perform...

5.3CVSS0.00273EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/31 2:15 p.m.32 views

CVE-2026-82701 code-projects Online Shopping System Search Functionality action.php sql injection

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

7.5CVSS0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/31 2:15 p.m.7 views

EUVD-2026-68594

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/31 2:15 p.m.16 views

CVE-2026-82701

A SQL injection vulnerability exists in the Search Functionality of code-projects Online Shopping System 1.0 , specifically in the keyword parameter of /action.php. An unauthenticated remote attacker can manipulate this argument to inject SQL, achieving low impact on confidentiality, integrity, a...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/31 2:00 p.m.10 views

CVE-2026-82700

A cross-site scripting (XSS) vulnerability exists in the Newsletter Subscription component of code-projects Online Shopping System 1.0 , specifically in the file /offersmail.php . Manipulation of the email argument allows a remote, unauthenticated attacker to inject script, resulting in low impac...

5.3CVSS4.5AI score0.00273EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/31 2:00 p.m.7 views

EUVD-2026-68530

A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription. The manipulation of the argument email results in cross site scripting. The attack may be perform...

5.3CVSS4.5AI score0.00273EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/31 12:00 a.m.11 views

PT-2026-83846

Name of the Vulnerable Software and Affected Versions code-projects Online Shopping System version 1.0 Description An issue exists in the Search Functionality component within the '/action.php' endpoint. Remote manipulation of the keyword argument allows for SQL injection, a technique where...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References9
Rows per page
Query Builder