CVE-2024-44664: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php...

CVE-2025-1855: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /product-details.php. The manipulation of the argument quality/price/value/name/summary/review leads to sql injection. The...

PT-2024-16830

Name of the Vulnerable Software and Affected Versions SourceCodester Best Employee Management System version 1.0 SourceCodester 442035.0 Description A critical issue has been found in the software, affecting some unknown functionality of the file /admin/fetch product details.php. The manipulation...

PT-2017-14896

Name of the Vulnerable Software and Affected Versions Basic B2B Script version 2.0.8 Description The issue is related to SQL Injection, which occurs via the id parameter in the "product details.php" API endpoint. Recommendations For Basic B2B Script version 2.0.8, consider restricting access to t...