4 matches found
CVE-2024-10338: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/home.php. The manipulation of the argument view/view1 leads to sql injection. The attack can be launched remotely. Th...
SourceCodeHero Clothes Recommendation System SQL Injection Vulnerability
SourceCodeHero Clothes Recommendation System is a SourceCodeHero open source clothing recommendation system. A SQL injection vulnerability exists in SourceCodeHero Clothes Recommendation System version 1.0, which stems from the parameter view/view1 in the file /admin/home.php that can lead to SQL...
PT-2024-16198
Name of the Vulnerable Software and Affected Versions SourceCodeHero Clothes Recommendation System version 1.0 Description A critical issue was found in the system, affecting an unknown functionality of the file /admin/home.php. The manipulation of the view argument, specifically view1, leads to...
PT-2017-14340
Name of the Vulnerable Software and Affected Versions Basic B2B Script affected versions not specified Description The issue allows SQL Injection via the product view1.php page, specifically through the pid or id parameters. Recommendations For all affected versions, avoid using the pid or id...