Lucene search
+L

24 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/05 12:00 a.m.•5 views

CVE-2022-2678: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System. It has been declared as critical. This vulnerability affects unknown code of the file adminfeature.php of the component Background Management Page. The manipulation leads to unrestricted upload. The attack can be...

8.8CVSS7.3AI score0.00853EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/05 12:00 a.m.•5 views

CVE-2022-2682: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Alphaware Simple E-Commerce System. Affected by this issue is some unknown functionality of the file stockin.php. The manipulation of the argument id with the input '" leads to cross site scripting. The attack...

5.4CVSS4.1AI score0.00587EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/08/05 12:00 a.m.•15 views

PT-2022-18080 · Sourcecodester · Sourcecodester Alphaware Simple E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester Alphaware Simple E-Commerce System affected versions not specified Description: A critical issue was discovered, affecting the Background Management Page component, specifically the admin feature.php file, allowing for...

8.8CVSS8.6AI score0.00853EPSS
SaveExploits1References3
OSV
OSV
•added 2020/08/17 5:15 p.m.•13 views

CVE-2020-24208

A SQL injection vulnerability in SourceCodester Online Shopping Alphaware 1.0 allows remote unauthenticated attackers to bypass the authentication process via email and password parameters...

9.8CVSS7.4AI score0.03312EPSS
SaveExploits0References3
Rows per page
Query Builder