CVE-2025-51970

CVE-2025-51970 CVE-2025-51970 - Injeção SQL no Online Shopping System Advanced Resumo Uma vulnerabilidade crítica de Injeção SQL foi descoberta no projeto Online Shopping System Advanced por PuneethReddyHC. A falha reside em action.php, que não sanitiza adequadamente a entrada do usuário...

CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS

CVE-2021-27190 - PEEL Shopping, carrello e-commerce - Vulnerabilità di Cross-Site Scripting persistente in 'Address' Data 2021-02-11 Autore dell'exploit Anmol K Sachan Homepage del fornitore https://www.peel.fr/ Link del software https://www.peel.fr/nos-offres-1/peel-shopping-31.html...

CVE-2025-51820

CVE-2025-51820 Eine kritische Remote Code Execution RCE-Sicherheitslücke CVE-2025-51820 wurde im Shopping Portal v1.0 entdeckt. 🚨 Remote Code Execution im Online Shopping Portal Project v1.0 CVE-2025-51820 🔍 Einleitung In der heutigen digitalen Welt ist Remote Code Execution RCE nach wie vor eine...

CVE-2021-41648

CVE-2021-41648 CVE-2021-41648 SQL-Injection in online-shopping-system Das online-shopping-system ist anfällig für nicht authentifizierte error-/boolean-basierte Blind- und fehlerbasierte SQL-Injection-Angriffe. Der proId-Parameter auf der Seite /action.php bereinigt die Benutzereingaben nicht; ei...

CVE-2024-50970

CVE-2024-50970 Descrizione Una vulnerabilità di SQL injection in orderview1.php di Itsourcecode Online Furniture Shopping Project 1.0 consente a un utente malintenzionato remoto di eseguire comandi SQL arbitrari tramite il parametro id. Tipo di vulnerabilità SQL Injection Fornitore del prodotto...

CVE-2024-50968

CVE-2024-50968 Beschreibung Es besteht eine Schwachstelle in der Geschäftslogik der Funktion "In den Warenkorb" des itsourcecode Agri-Trading Online Shopping System 1.0, die es entfernten Angreifern ermöglicht, den quant-Parameter beim Hinzufügen eines Produkts zum Warenkorb zu manipulieren. Durc...

CVE-2024-39090-PoC

CVE-2024-39090 PoC Exploit Script Questo script PoC sfrutta CVE-2024-39090, una vulnerabilità CSRF to Stored XSS in PHPGurukul Online Shopping Portal v2.0. Automatizza attacchi CSRF per iniettare payload JavaScript persistenti, che vengono eseguiti quando un utente privilegiato accede alla pagina...

CVE-2025-61246

CVE-2025-61246 - Vulnerabilità di SQL Injection nel Sistema di Shopping Online Panoramica Questa repository contiene una Proof of Concept PoC per CVE-2025-61246 , una vulnerabilità critica di SQL Injection scoperta nell'applicazione PHP Online Shopping System. La vulnerabilità consente a un...

CVE-2023-38890

CVE-2023-38890 Beschreibung Das Online Shopping Portal Project V3.1 ermöglicht es entfernten Angreifern, beliebige SQL-Befehle/-Abfragen über das Anmeldeformular auszuführen, was zu unbefugtem Zugriff und potenzieller Datenmanipulation führt. Diese Schwachstelle entsteht durch unzureichende...

DWrwq

Descrição O PHPGurukul Online Shopping Portal 2.1 é vulnerável a Cross Site Scripting XSS em /admin/updateorder.php. Visão Geral da Vulnerabilidade 1.Tipo de Vulnerabilidade: Stored Cross-Site Scripting XSS 2.Produto Afetado: Online Shopping Portal Project - 2.1 3.Componente Afetado:...

CVE-2026-79793 code-projects Online Shopping System sumit_form.php cross site scripting

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumitform.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has be...

CVE-2026-79793

code-projects Online Shopping System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the file /admin/sumit_form.php , caused by insufficient input validation on the Success argument. The attack is remote and requires user interaction , but no authentication is needed. Impact is r...

CVE-2024-8949-POC

Vulnerabilità di controllo degli accessi inadeguato scoperta in Sourcecodester Online Eyewear Shopping Website - La manipolazione dell'ID del carrello porta all'aggiunta e alla rimozione indesiderata di articoli nel carrello dell'utente CVE-2024-8949 Venditore: Sourcecodester...

PuneethReddyHC Online Shopping System homeaction.php SQL Injection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping System through the /homeaction.php catid parameter. Using a post request does not sanitize the user input. id: CVE-2021-41649 info: name: PuneethReddyHC Online Shopping System homeaction.php SQL Injection...

PuneethReddyHC action.php SQL Injection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping through the /action.php prId parameter. Using a post request does not sanitize the user input. id: CVE-2021-41648 info: name: PuneethReddyHC action.php SQL Injection author: daffainfo severity: high descriptio...

CVE-2021-41649

CVE-2021-41649 CVE-2021-41649 Injeção SQL no online-shopping-system O online-shopping-system é vulnerável a ataques de injeção SQL não autenticados, baseados em erro/boolean blind e baseados em erro. O parâmetro catid na página /homeaction.php não sanitiza a entrada do usuário, um atacante pode...

CVE-2025-10046

CVE-2025-10046 - ELEX WooCommerce Google Shopping Autore: Byte Reaper Descrizione CVE-2025-10046 è una vulnerabilità di iniezione SQL nel plugin ELEX WooCommerce Google Shopping Product Feed per WordPress, versioni 1.4.3 e precedenti. Il problema risiede nel file includes/elex-manage-feed-ajax.ph...

CVE-2024-40498

CVE-2024-40498 Aplicação Afetada online-shopping-system-advanced 1.0 https://github.com/PuneethReddyHC/online-shopping-system-advanced Descrição O arquivo register.php lida com o registro de usuários. Na linha 117, os parâmetros POST "$address1" e "$address2" não são sanitizados, ao contrário do...

CVE-2026-19998

A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to...

EUVD-2026-60064

A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to...