CVE-2025-8933

CVE-2025-8933 affects the open‑source product 1000 Projects Sales Management System v1.0 . A cross‑site scripting vulnerability exists in the processing of the file /superstore/admin/sales.php due to unsafely handling the parameter ssalescat . The issue can be triggered remotely and the exploit h...

CVE-2025-8936

The CVE targets 1000 Projects Sales Management System 1.0. The vulnerability lies in the file /superstore/dist/dordupdate.php, where improper handling of the select2 parameter enables SQL injection. A remote attacker could exploit this, and public disclosures exist. Affected component: the dordup...

CVE-2025-8935

CVE-2025-8935 affects the open-source product “1000 Projects Sales Management System” version 1.0. The vulnerability exists in an unknown functionality of the file /superstore/custcmp.php , where manipulating the Username parameter triggers a SQL injection. The impact is remote exploitation with ...

CVE-2025-8934

CVE-2025-8934 affects 1000 Projects Sales Management System v1.0. The vulnerability lies in an unknown function of file /sales.php , where manipulation of the parameter select2112 enables cross-site scripting (XSS) . Exploitation is possible remotely and has been publicly disclosed. Multiple conn...

CVE-2025-8932

CVE-2025-8932 affects 1000 Projects Sales Management System 1.0. A SQL injection exists in the code path handling the /superstore/admin/sales.php file, caused by manipulating the ssalescat parameter. The vulnerability is remotely exploitable and has been publicly disclosed. Several connected sour...