Lucene search
K

17 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 1:18 a.m.5 views

CVE-2022-30400

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/orders/vieworder.php?view=user=...

7.2CVSS8.1AI score0.00274EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:40 p.m.3 views

CVE-2022-41408

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

9.8CVSS9.8AI score0.00264EPSS
Exploits0References1
OSV
OSV
added 2025/01/02 6:15 p.m.0 views

CVE-2025-0173

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /orders/vieworder.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has...

7.5CVSS6.5AI score
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/01/02 12:0 a.m.3 views

PT-2025-3762 · Unknown · Sourcecodester Online Eyewear Shop

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Eyewear Shop version 1.0 Description: A critical issue affects some unknown functionality of the file /orders/view order.php. The manipulation of the id argument leads to SQL injection. The attack may be launched remotel...

7.5CVSS7.3AI score0.00143EPSS
Exploits1References11
CNNVD
CNNVD
added 2024/08/06 12:0 a.m.4 views

Young Entrepreneur E-Negosyo System 跨站脚本漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System by janobe individual developers. A cross-site scripting vulnerability exists in Young Entrepreneur E-Negosyo System version 1.0. An attacker can create a specially crafted URL and send it to a victim to obtain their...

7.1CVSS6.1AI score0.00174EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/03/03 12:0 a.m.2 views

PT-2024-18944 · Sourcecodester · Sourcecodester Online Mobile Management Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Mobile Management Store version 1.0 Description: A critical issue was found in the file /admin/orders/view order.php, where the manipulation of the id argument leads to sql injection. This issue can be initiated remotely...

9.8CVSS7AI score0.00136EPSS
Exploits1References7
OSV
OSV
added 2023/02/22 8:15 p.m.0 views

CVE-2023-0966

A vulnerability classified as problematic was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=orders/vieworder. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotel...

8.8CVSS3.7AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/02/22 12:0 a.m.2 views

PT-2023-16650 · Sourcecodester · Sourcecodester Online Eyewear Shop

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Eyewear Shop version 1.0 Description: A problematic issue was found in the software, affecting an unknown functionality of the file "admin/?page=orders/view order". The manipulation of the id argument leads to cross-site...

8.8CVSS4AI score0.00483EPSS
Exploits1References5
CNNVD
CNNVD
added 2022/10/27 12:0 a.m.1 views

Online Medicine Ordering System 安全漏洞

Online Medicine Ordering System is an online medicine ordering system by Carlo Montero, an individual developer. A security vulnerability exists in version 1.0 of the Online Medicine Ordering System due to an unknown function in its admin/?page=orders/vieworder file that operates on the parameter...

9.8CVSS8.5AI score0.00245EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/10/27 12:0 a.m.3 views

PT-2022-23834 · Unknown · Sourcecodester Online Medicine Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Medicine Ordering System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file "admin/?page=orders/view order". The manipulation of the id argument leads to SQL...

9.8CVSS9.6AI score0.00245EPSS
Exploits0References3
OSV
OSV
added 2022/10/12 12:15 a.m.3 views

CVE-2022-41408

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

9.8CVSS5.8AI score0.00264EPSS
Exploits0References1
OSV
OSV
added 2022/10/12 12:15 a.m.0 views

CVE-2022-41407

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

7.2CVSS5.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/10/11 12:0 a.m.4 views

CVE-2022-41407

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

8.3AI score0.00274EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/13 3:15 p.m.1 views

CVE-2022-30398

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=orders/vieworder&id=...

7.2CVSS7.2AI score0.00274EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/05/13 3:15 p.m.0 views

CVE-2022-30400

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/orders/vieworder.php?view=user&id=...

7.2CVSS7.2AI score0.00274EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/13 12:0 a.m.2 views

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Stor has a security vulnerability that can be exploited by attackers to conduct SQL injection via /vloggersmerch/admin/?page=orders/vieworder&id= attack...

7.2CVSS7.3AI score0.00274EPSS
Exploits1References2
WPVulnDB
WPVulnDB
added 2021/06/01 12:0 a.m.9 views

WordPress Bitcoin Payments - Blockonomics < 3.3 - Reflected Cross-Site Scripting (XSS)

The plugin does not properly sanitise its filter action when viewing Orders before outputting it back in an attribute, leading to a reflected Cross-Site Scripting vulnerability. PoC v...

0.7AI score
Exploits0References1Affected Software1
Rows per page
Query Builder