Lucene search
K

13 matches found

CNNVD
CNNVD
added 2026/04/09 12:0 a.m.3 views

Code-Projects Online Shoe Store 代码注入漏洞

Code-Projects Online Shoe Store is an open-source online shoe store system developed by Code-Projects. Version 1.0 of Code-Projects Online Shoe Store contains a code injection vulnerability. This vulnerability arises from incorrect handling of the productname parameter in the file...

4.8CVSS5.7AI score0.00035EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/03/03 12:0 a.m.1 views

CVE-2026-26890

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manageproduct.php...

6AI score0.00011EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/03/02 12:0 a.m.22 views

CVE-2026-26705

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/viewproduct.php...

0.00049EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/01/01 12:0 a.m.4 views

Code-Projects Online Guitar Store SQL注入漏洞

Code-Projects Online Guitar Store is a Code-Projects open source online guitar store. A SQL injection vulnerability exists in Code-Projects Online Guitar Store version 1.0, which stems from an incorrect operation of the parameter delpro in the file /admin/Deleteproduct.php, which could lead to SQ...

9.8CVSS7.8AI score0.00006EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/11/04 12:53 a.m.3 views

CVE-2025-63448

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /editproduct.php?id=1...

6.1CVSS6.2AI score0.00041EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/10/28 12:0 a.m.2 views

CampCodes Retro Basketball Shoes Online Store SQL注入漏洞

CampCodes Retro Basketball Shoes Online Store is an online store for retro basketball shoes from CampCodes, Inc. A SQL injection vulnerability exists in CampCodes Retro Basketball Shoes Online Store version 1.0, which stems from incorrect manipulation of the parameter pid in the file...

9.8CVSS7.7AI score0.0001EPSS
Exploits1References6
OSV
OSV
added 2025/07/28 5:16 a.m.0 views

CVE-2025-8256

A vulnerability classified as critical has been found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/product.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has bee...

9.8CVSS5.5AI score
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 11:41 p.m.2 views

CVE-2022-44859

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/manageproduct.php...

7.2CVSS8.4AI score0.00274EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/03/01 12:0 a.m.3 views

PT-2024-21000 · W&T +1 · Com Redirector Legacy +5

Name of the Vulnerable Software and Affected Versions: Product affected versions not specified Description: A local attacker can gain administrative privileges by inserting an executable file in the path of the affected product. Recommendations: At the moment, there is no information about a newe...

7.8CVSS8.8AI score0.00029EPSS
Exploits0References3
OSV
OSV
added 2022/12/14 5:15 p.m.0 views

CVE-2022-46127

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=deleteproduct...

7.2CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2022/11/25 6:15 p.m.0 views

CVE-2022-44858

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/products/viewproduct.php...

7.2CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2022/05/24 2:15 p.m.0 views

CVE-2022-30463

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deleteproduct...

8.8CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2022/05/24 12:0 a.m.1 views

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store version 1.0 is vulnerable to SQL injection, which can be exploited by attackers via /vloggersmerch/classes/Master.php?f=delete product to conduct SQL injection attacks...

9.8CVSS5.8AI score0.00264EPSS
Exploits1References2
Rows per page
Query Builder