EUVD-2025-36372

A vulnerability was found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument prodname/proddesc/prodcost results in cross site scripting. It is possible to launch the attack remotely. The exploit has been mad...

CVE-2025-12334: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument prodname/proddesc/prodcost results in cross site scripting. It is possible to launch the attack remotely. The exploit has been mad...

CVE-2010-5053: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the XOBBIX comxobbix component 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the prodid parameter in a proddesc action to index.php...