Lucene search
+L

13 matches found

NVD
NVD
•added 2024/04/23 10:15 p.m.•31 views

CVE-2024-4069

A vulnerability, which was classified as critical, was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file search.php. The manipulation of the argument txtSearch leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS6.8AI score0.006EPSS
SaveExploits1References4
CVE
CVE
•added 2024/04/23 10:00 p.m.•185 views

CVE-2024-4071

CVE-2024-4071 affects Kashipara Online Furniture Shopping Ecommerce Website version 1.0. The vulnerability is in the prodInfo.php file, where manipulation of the prodId argument leads to SQL injection. An attacker can exploit remotely; public disclosure is noted. Several connected sources confirm...

8.8CVSS7.3AI score0.00662EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/23 12:00 a.m.•1 views

CVE-2024-4071: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0 and classified as critical. This issue affects some unknown processing of the file prodInfo.php. The manipulation of the argument prodId leads to sql injection. The attack may be initiated remotely. The exploit...

8.8CVSS5.5AI score0.00662EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/23 12:00 a.m.•4 views

CVE-2024-4075: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file login.php. The manipulation of the argument txtAddress leads to cross site scripting. It is possible to initiate the attack remotely. The...

6.1CVSS4AI score0.00574EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/23 12:00 a.m.•6 views

PT-2024-28985

Name of the Vulnerable Software and Affected Versions Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description A critical issue was found in the file search.php, where the manipulation of the txtSearch argument leads to SQL injection. This can be initiated remotely...

7.5CVSS5.5AI score0.006EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/04/23 12:00 a.m.•3 views

PT-2024-29007

Name of the Vulnerable Software and Affected Versions Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description A vulnerability was found in the Kashipara Online Furniture Shopping Ecommerce Website, affecting an unknown functionality of the file prodList.php. The manipulation...

5.4CVSS0.00519EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/23 12:00 a.m.•4 views

CVE-2024-4069: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file search.php. The manipulation of the argument txtSearch leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS5.5AI score0.006EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/23 12:00 a.m.•3 views

CVE-2024-4074: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file prodInfo.php. The manipulation of the argument prodId leads to cross site scripting. The attack may be launche...

6.1CVSS3.8AI score0.00574EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/23 12:00 a.m.•4 views

CVE-2024-4073: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file prodList.php. The manipulation of the argument prodType leads to cross site scripting. The attack can...

5.4CVSS3.8AI score0.00519EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/23 12:00 a.m.•4 views

PT-2024-29026

Name of the Vulnerable Software and Affected Versions Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description A problematic vulnerability has been found in the login.php file, where the manipulation of the txtAddress argument leads to cross-site scripting. This issue can be...

6.1CVSS5.1AI score0.00574EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/23 12:00 a.m.•5 views

CVE-2024-4072: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. It has been classified as problematic. Affected is an unknown function of the file search.php. The manipulation of the argument txtSearch leads to cross site scripting. It is possible to launch the attack...

5.4CVSS4AI score0.00519EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/04/23 12:00 a.m.•3 views

PT-2024-28990

Name of the Vulnerable Software and Affected Versions Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description A critical issue has been identified, affecting the prodList.php file, where the manipulation of the prodType argument leads to SQL injection. This issue can be...

7.5CVSS0.006EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/23 12:00 a.m.•5 views

CVE-2024-4070: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0 and classified as critical. This vulnerability affects unknown code of the file prodList.php. The manipulation of the argument prodType leads to sql injection. The attack can be initiated remotely. The...

7.5CVSS5.5AI score0.006EPSS
SaveExploits1References2
Rows per page
Query Builder