173 matches found
CVE-2025-51820
CVE-2025-51820 在 Shopping Portal v1.0 中发现了一个严重的远程代码执行 RCE 漏洞 CVE-2025-51820。 🚨 在线购物门户项目 v1.0 中的远程代码执行漏洞 CVE-2025-51820 🔍 简介 在当今数字化世界中，远程代码执行 RCE 仍然是最危险的 Web 应用程序漏洞之一。本报告重点介绍了 phpgurukul 开发的 在线购物门户项目 v1.0 中的一个严重远程代码执行漏洞 CVE-2025-51820。利用此漏洞，攻击者可以远程执行任意系统命令，可能导致系统完全受损。 🛡️ 漏洞概述 CVE 编号 ：CVE-2025-51820...
CVE-2024-40110
Proof of Concept PoC for Unauthenticated Remote Code Execution in Sourcecodester Poultry Farm Management System v1.0 This repository contains a Proof of Concept PoC script demonstrating an unauthenticated remote code execution RCE vulnerability in Sourcecodester Poultry Farm Management System v1....
CVE-2018-25341
Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to product.php with union-based SQL injection payloads in the id parameter to extract...
CVE-2018-25341 Smartshop 1 SQL Injection via product.php id Parameter
Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to product.php with union-based SQL injection payloads in the id parameter to extract...
CVE-2025-14650
A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakeshop/product.php. Executing manipulation of the argument Product can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...
CVE-2025-14650
A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakeshop/product.php. Executing manipulation of the argument Product can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...
CVE-2025-14650
A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakeshop/product.php. Executing manipulation of the argument Product can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...
CVE-2025-14650 itsourcecode Online Cake Ordering System product.php sql injection
A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakeshop/product.php. Executing manipulation of the argument Product can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...
CVE-2025-12920 qianfox FoxCMS Product.php edit cross site scripting
A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the file app/admin/controller/Product.php. This manipulation of the argument Title causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-12920
FoxCMS up to 1.2.16 contains a cross-site scripting vulnerability in the add/edit path (app/admin/controller/Product.php, Title parameter). The issue can be triggered remotely and an exploit has been published; vendor did not respond. Affected versions should be updated to mitigate; as a workarou...
EUVD-2025-32869
A vulnerability was identified in code-projects Simple Food Ordering System 1.0. Impacted is an unknown function of the file /product.php. Such manipulation of the argument Category leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...
EUVD-2009-1814
Malware in sbrugna...
EUVD-2021-24041
Malware in sbrugna...
EUVD-2020-26494
Malware in sbrugna...
EUVD-2018-6855
Malware in sbrugna...
code-projects Simple Food Ordering System 安全漏洞
Simple Food Ordering System is a simple food ordering system. The Simple Food Ordering System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Category in the file /product.php. An attacker can exploit thi...
EUVD-2025-26274
Malicious code in bioql PyPI...
EUVD-2025-16852
Malicious code in bioql PyPI...