CVE-2025-10598: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This issue affects some unknown processing of the file /admin/searchproduct.php. Such manipulation of the argument groupid leads to sql injection. The attack may be launched remotely. The exploit is publicly...

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar SQL Injection Vulnerability

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to SQL injection, which stems from The keyword parameter of the searchproduct.php page lacks validation for external input SQL statements. An...

CVE-2022-30478: Improper Neutralization of Special Elements used in an SQL Command

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \searchproduct.php via the keyword parameters...

sayvour.com.hk XSS vulnerability

Open Bug Bounty ID: OBB-628338 Description| Value ---|--- Affected Website:| sayvour.com.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...