Lucene search
+L

99 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 12:03 a.m.•20 views

CVE-2022-43214

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php...

9.8CVSS8.3AI score0.00933EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:54 p.m.•12 views

CVE-2022-43212

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at fetchOrderData.php...

9.8CVSS8.3AI score0.00914EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/16 12:26 a.m.•15 views

CVE-2025-26156

A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request parameter...

8.8CVSS8.8AI score0.00763EPSS
SaveExploits1References1
OSV
OSV
•added 2025/02/14 5:15 p.m.•13 views

CVE-2025-26156

A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request parameter...

8.8CVSS6.2AI score0.00763EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/02/14 12:00 a.m.•14 views

PT-2025-7125 · Unknown · Phpgurukul Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Shopping Portal version 2.1 Description: A SQL Injection issue was found in the /shopping/track-orders.php file, allowing remote attackers to execute arbitrary code via the orderid POST request parameter. Recommendations: Fo...

8.8CVSS8.1AI score0.00763EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2025/02/14 12:00 a.m.•25 views

CVE-2025-26156

A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request parameter...

0.00763EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/02/14 12:00 a.m.•12 views

CVE-2025-26156

A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request parameter...

9.2AI score0.00763EPSS
SaveExploits1References1
CVE
CVE
•added 2025/02/14 12:00 a.m.•97 views

CVE-2025-26156

A SQL Injection vulnerability exists in the PHPGurukul Online Shopping Portal v2.1 within the /shopping/track-orders.php file. The root cause is a lack of validation for externally entered SQL statements, specifically through the orderid POST request parameter . This flaw allows remote attackers ...

8.9AI score0.00763EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2024/02/14 3:15 p.m.•27 views

CVE-2024-25223

Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.php...

9.8CVSS7.8AI score0.00628EPSS
SaveExploits1References1
Prion
Prion
•added 2024/02/14 3:15 p.m.•24 views

Sql injection

Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.php...

8.6AI score0.00628EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/02/14 12:00 a.m.•8 views

CVE-2024-25223

Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.php...

9.9AI score0.00628EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/02/14 12:00 a.m.•19 views

PT-2024-20834 · Unknown · Simple Admin Panel

Name of the Vulnerable Software and Affected Versions: Simple Admin Panel App version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the orderID parameter at the "/adminView/viewEachOrder.php" API endpoint. Recommendations: For Simp...

9.8CVSS6.9AI score0.00628EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/02/14 12:00 a.m.•44 views

CVE-2024-25223

Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.php...

8.1AI score0.00628EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/11/24 12:00 a.m.•64 views

Billing System Project fetchOrderData.php SQL Injection Vulnerability

Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the orderId parameter in fetchOrderData.php against an externally entered SQL statement. An attacker...

9.8CVSS9.6AI score0.00914EPSS
SaveExploits0References1
NVD
NVD
•added 2022/11/22 6:15 p.m.•24 views

CVE-2022-43212

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at fetchOrderData.php...

9.8CVSS0.00914EPSS
SaveExploits0References2
NVD
NVD
•added 2022/11/22 1:15 a.m.•40 views

CVE-2022-43214

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php...

9.8CVSS0.00933EPSS
SaveExploits0References2
OSV
OSV
•added 2022/11/22 1:15 a.m.•12 views

CVE-2022-43214

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php...

9.8CVSS5.8AI score0.00933EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/11/22 12:00 a.m.•39 views

CVE-2022-43212

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at fetchOrderData.php...

10AI score0.00914EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/11/22 12:00 a.m.•13 views

PT-2022-26795 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the orderId parameter at the "printOrder.php" endpoint. Recommendations: For Billing System Project...

9.8CVSS8.1AI score0.00933EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2022/11/22 12:00 a.m.•41 views

CVE-2022-43214

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php...

10AI score0.00933EPSS
SaveExploits0References2
Rows per page
Query Builder