Lucene search
+L

357 matches found

Kitploit
Kitploit
added 2026/09/18 2:00 p.m.10 views

CVE-2023-38890

CVE-2023-38890 Описание Проект Online Shopping Portal версии 3.1 позволяет удаленным злоумышленникам выполнять произвольные SQL-команды/запросы через форму входа, что приводит к несанкционированному доступу и возможному манипулированию данными. Эта уязвимость возникает из-за недостаточной проверк...

8.8CVSS8.2AI score0.01417EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/18 12:55 p.m.8 views

CVE-2024-39090-PoC

CVE-2024-39090 PoC Exploit Script Этот PoC-скрипт эксплуатирует CVE-2024-39090, уязвимость CSRF к Stored XSS в PHPGurukul Online Shopping Portal v2.0. Он автоматизирует CSRF-атаки для внедрения постоянных JavaScript-полезных нагрузок, которые выполняются, когда привилегированный пользователь...

6.1CVSS6AI score0.00503EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 5:10 a.m.12 views

DWrwq

설명 PHPGurukul Online Shopping Portal 2.1은 /admin/updateorder.php에서 크로스 사이트 스크립팅XSS에 취약합니다. 취약점 개요 1.취약점 유형: 저장형 크로스 사이트 스크립팅XSS 2.영향받는 제품: Online Shopping Portal Project - 2.1 3.영향받는 구성 요소: /shopping/admin/updateorder.php?oid=0 4.공격 유형: 저장형 크로스 사이트 스크립팅XSS 재현 단계 1.애플리케이션 설정 : 취약한 버전v2.1을 로컬 서버에...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 2:34 p.m.8 views

CVE-2025-51820

CVE-2025-51820 Критическая уязвимость удаленного выполнения кода RCE CVE-2025-51820 обнаружена в Shopping Portal v1.0. 🚨 Удаленное выполнение кода в Online Shopping Portal Project v1.0 CVE-2025-51820 🔍 Введение В современном цифровом мире удаленное выполнение кода RCE остается одной из самых...

6.6AI score
SaveExploits1
Cvelist
Cvelist
added 2026/05/08 2:15 a.m.70 views

CVE-2026-8128 SourceCodester SUP Online Shopping viewmsg.php sql injection

A vulnerability was found in SourceCodester SUP Online Shopping 1.0. The affected element is an unknown function of the file /admin/viewmsg.php. Performing a manipulation of the argument msgid results in sql injection. The attack is possible to be carried out remotely. The exploit has been made...

7.5CVSS0.00254EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/04/07 10:52 a.m.14 views

CVE-2026-5640

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /admin/update-image2.php of the component Parameter Handler. The manipulation of the argument filename leads to sql injection. The attack is possible to be...

6.5CVSS5.7AI score0.00192EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/07 10:52 a.m.13 views

CVE-2026-5636

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /cancelorder.php of the component Parameter Handler. This manipulation of the argument oid causes sql injection. The attack may be initiated remotely. The exploit has been mad...

6.5CVSS5.7AI score0.00246EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/07 10:52 a.m.12 views

CVE-2026-5639

A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a manipulation of the argument filename can lead to sql injection. The attack can be executed remotely. The...

6.5CVSS5.8AI score0.00246EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/07 5:12 a.m.16 views

CVE-2026-5606

A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /order-details.php of the component Parameter Handler. The manipulation of the argument orderid results in sql injection. It is possible to launch the atta...

6.5CVSS6.5AI score0.00255EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/06 12:32 p.m.13 views

EUVD-2026-19211

A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The manipulation of the argument filename results in sql injection. The attack may be performed from...

6.5CVSS5.6AI score0.00196EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/04/06 9:31 a.m.15 views

EUVD-2026-19193

A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. Affected by this issue is some unknown functionality of the file /categorywise-products.php of the component Parameter Handler. The manipulation of the argument cid results in sql injection. The attack can be...

6.5CVSS5.7AI score0.00246EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/04/06 9:15 a.m.44 views

CVE-2026-5641 PHPGurukul Online Shopping Portal Project Parameter update-image1.php sql injection

A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The manipulation of the argument filename results in sql injection. The attack may be performed from...

6.5CVSS0.00196EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/06 9:15 a.m.29 views

CVE-2026-5641

The CVE-2026-5641 issue affects PHPGurukul Online Shopping Portal Project 2.1, specifically the /admin/update-image1.php file in the Parameter Handler. The vulnerability arises from manipulating the filename argument, leading to SQL injection. It can be exploited remotely, and the exploit has bee...

6.5CVSS6.3AI score0.00196EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/04/06 9:15 a.m.21 views

CVE-2026-5641 PHPGurukul Online Shopping Portal Project Parameter update-image1.php sql injection

A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The manipulation of the argument filename results in sql injection. The attack may be performed from...

6.5CVSS6.3AI score0.00196EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/04/06 9:00 a.m.47 views

CVE-2026-5640 PHPGurukul Online Shopping Portal Project Parameter update-image2.php sql injection

A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /admin/update-image2.php of the component Parameter Handler. The manipulation of the argument filename leads to sql injection. The attack is possible to be...

6.5CVSS0.00192EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/04/06 8:45 a.m.53 views

CVE-2026-5639 PHPGurukul Online Shopping Portal Project Parameter update-image3.php sql injection

A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1. Impacted is an unknown function of the file /admin/update-image3.php of the component Parameter Handler. Executing a manipulation of the argument filename can lead to sql injection. The attack can be executed remotely. The...

6.5CVSS0.00246EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/04/06 8:00 a.m.5 views

CVE-2026-5636 PHPGurukul Online Shopping Portal Project Parameter cancelorder.php sql injection

A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /cancelorder.php of the component Parameter Handler. This manipulation of the argument oid causes sql injection. The attack may be initiated remotely. The exploit has been mad...

6.5CVSS6.5AI score0.00246EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/04/06 7:45 a.m.45 views

CVE-2026-5635 PHPGurukul Online Shopping Portal Project Parameter categorywise-products.php sql injection

A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. Affected by this issue is some unknown functionality of the file /categorywise-products.php of the component Parameter Handler. The manipulation of the argument cid results in sql injection. The attack can be...

6.5CVSS0.00246EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/06 7:45 a.m.9 views

CVE-2026-5635

A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. Affected by this issue is some unknown functionality of the file /categorywise-products.php of the component Parameter Handler. The manipulation of the argument cid results in sql injection. The attack can be...

6.5CVSS6.5AI score0.00246EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2026/04/06 7:45 a.m.33 views

CVE-2026-5635

CVE-2026-5635 affects PHPGurukul Online Shopping Portal Project 2.1. The vulnerability is in the Parameter Handler’s /categorywise-products.php, where manipulating the cid parameter leads to SQL injection. Attacks can be launched remotely and the exploit has been released publicly. Concrete remed...

6.5CVSS6.5AI score0.00246EPSS
SaveExploits0References5
Rows per page
Query Builder