Lucene search
K

21 matches found

CNVD
CNVD
added 2025/10/31 12:0 a.m.1 views

E-Commerce Website supplier_add.php file cross-site scripting vulnerability

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters suppname and suppaddress in the file /pages/supplieradd.php, which can be exploite...

6.1CVSS6AI score0.00041EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 10:59 p.m.7 views

CVE-2025-12333

A vulnerability has been found in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/supplieradd.php. The manipulation of the argument suppname/suppaddress leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

6.1CVSS3.8AI score0.00041EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/28 12:31 a.m.3 views

EUVD-2025-36373

A vulnerability has been found in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/supplieradd.php. The manipulation of the argument suppname/suppaddress leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

5.3CVSS3.8AI score0.00041EPSS
Exploits1References6
OSV
OSV
added 2025/10/27 11:15 p.m.2 views

CVE-2025-12333

A vulnerability has been found in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/supplieradd.php. The manipulation of the argument suppname/suppaddress leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

6.1CVSS4.1AI score
Exploits0References5
CVE
CVE
added 2025/10/27 10:32 p.m.7 views

CVE-2025-12333

Code-Projects E-Commerce Website 1.0 has a cross-site scripting vulnerability in /pages/supplier_add.php. The issue stems from lack of input filtering/escaping for the supp_name and supp_address parameters, enabling remote injection of arbitrary scripts. Exploitation is possible remotely and the ...

6.1CVSS4AI score0.00041EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/27 10:32 p.m.5 views

CVE-2025-12333 code-projects E-Commerce Website supplier_add.php cross site scripting

A vulnerability has been found in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/supplieradd.php. The manipulation of the argument suppname/suppaddress leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

5.3CVSS0.00041EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/27 10:32 p.m.2 views

CVE-2025-12333 code-projects E-Commerce Website supplier_add.php cross site scripting

A vulnerability has been found in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/supplieradd.php. The manipulation of the argument suppname/suppaddress leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

5.3CVSS3.9AI score0.00041EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.4 views

PT-2025-44060

Name of the Vulnerable Software and Affected Versions Code-Projects E-Commerce Website version 1.0 Description A cross site scripting issue exists in Code-Projects E-Commerce Website version 1.0. The issue is related to the manipulation of the supp name/supp address arguments within the file...

6.1CVSS4.3AI score0.00041EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.5 views

Code-Projects E-Commerce Website 代码注入漏洞

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters suppname and suppaddress in the file /pages/supplieradd.php, which can be exploite...

6.1CVSS5.9AI score0.00041EPSS
Exploits1References6
CNVD
CNVD
added 2025/10/13 12:0 a.m.2 views

E-Commerce Website supplier_add.php File SQL Injection Vulnerability

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter suppemail in the file /pages/supplieradd.php. An attacker can exploit this vulnerability to...

9.8CVSS8.3AI score0.00043EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/10 1:32 a.m.3 views

CVE-2025-11511

A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplieradd.php. Executing manipulation of the argument suppemail can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

9.8CVSS6.9AI score0.00043EPSS
Exploits1References1
NVD
NVD
added 2025/10/08 11:15 p.m.3 views

CVE-2025-11511

A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplieradd.php. Executing manipulation of the argument suppemail can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

9.8CVSS0.00043EPSS
Exploits1References5
OSV
OSV
added 2025/10/08 11:15 p.m.2 views

CVE-2025-11511

A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplieradd.php. Executing manipulation of the argument suppemail can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

9.8CVSS5.8AI score0.00043EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/08 11:2 p.m.2 views

CVE-2025-11511 code-projects E-Commerce Website supplier_add.php sql injection

A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplieradd.php. Executing manipulation of the argument suppemail can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

6.5CVSS6.6AI score0.00043EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/08 11:2 p.m.6 views

CVE-2025-11511 code-projects E-Commerce Website supplier_add.php sql injection

A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplieradd.php. Executing manipulation of the argument suppemail can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

6.5CVSS0.00043EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/08 11:2 p.m.4 views

EUVD-2025-33271

A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplieradd.php. Executing manipulation of the argument suppemail can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

6.5CVSS6.5AI score0.00043EPSS
Exploits1References7
CVE
CVE
added 2025/10/08 11:2 p.m.10 views

CVE-2025-11511

CVE-2025-11511 affects the code-projects E-Commerce Website 1.0, specifically the file /pages/supplier_add.php. The vulnerability arises from insufficient validation/manipulation protection of the supp_email parameter, allowing SQL injection and enabling remote exploitation. Multiple sources note...

9.8CVSS6.6AI score0.00043EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/10/08 12:0 a.m.2 views

Code-Projects E-Commerce Website SQL注入漏洞

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter suppemail in the file /pages/supplieradd.php. An attacker can exploit this vulnerability to...

9.8CVSS8.2AI score0.00043EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/10/08 12:0 a.m.2 views

PT-2025-41319

Name of the Vulnerable Software and Affected Versions code-projects E-Commerce Website version 1.0 Description A flaw exists in code-projects E-Commerce Website 1.0, specifically within the file /pages/supplier add.php. Manipulation of the supp email argument can lead to SQL injection. This attac...

9.8CVSS6.9AI score0.00043EPSS
Exploits1References9
OSV
OSV
added 2025/05/17 3:17 a.m.3 views

CVE-2025-4814

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/supplieradd.php. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely...

9.8CVSS5.8AI score0.00204EPSS
Exploits1References5
Rows per page
Query Builder