14 matches found
EUVD-2022-4793
Malicious code in bioql PyPI...
Online Shoe Store cart.php File SQL Injection Vulnerability
Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter qty in the file /cart.php. The vulnerability can be exploited to execute illegal SQL...
CVE-2025-6316
A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/adminrunning.php. The manipulation of the argument qty leads to sql injection. The attack may be launched remotely. The exploit...
code-projects Online Shoe Store 注入漏洞
Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter qty in the file /cart.php. The vulnerability can be exploited to execute illegal SQL...
CVE-2023-30092
SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter...
CVE-2019-19212
Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...
CVE-2023-30092
SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter...
CVE-2023-30092
SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter...
CVE-2023-30092
SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter...
CVE-2019-19212
Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...
UBUNTU-CVE-2019-19212
Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...
CVE-2019-19212
Vulnerability summary (CVE-2019-19212) : Dolibarr ERP/CRM versions 3.0 through 10.0.3 are affected by a cross-site scripting (XSS) flaw in the qty parameter on the product/fournisseurs.php (product price screen). The root cause is an XSS issue in the handling of this parameter leading to script e...
Virtual Freer Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability exists in the 'qty' parameter on the 'irect.php ' page in Virtual Freer version 1.58, which allows attackers to inject their own malicious scripts...
Virtual Freer v1.58 - CS Cross Site Scripting Vulnerability
Document Title: =============== Virtual Freer v1.58 - CS Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1812 Release Date: ============= 2016-04-06 Vulnerability Laboratory ID VL-ID: ===================================...