CVE-2024-2927

CVE-2024-2927 affects code-projects Mobile Shop 1.0, specifically the Login Page’s Details.php. The vulnerability is a SQL injection triggered by manipulating the id parameter, with remote-exploitability and a critical impact profile per the sources. Multiple advisories (NVD, Red Hat CVE, CVE lis...

CVE-2025-7459

Concrete details confirm: code-projects Mobile Shop 1.0 is affected in EditMobile.php, where the ID parameter is not validated, enabling remote SQL injection. Public exploitation has been disclosed. Impact is described as high/critical with potential data exposure and modification, and remote com...

CVE-2025-7409

CVE-2025-7409 affects code-projects Mobile Shop 1.0. The vulnerability arises from insecure handling of the email parameter in /LoginAsAdmin.php, enabling SQL injection. Exploitation can be performed remotely and has been publicly disclosed in multiple sources, with high/severe impact potential o...

CVE-2025-7612

The CVE-2025-7612 entry describes a SQL injection in code-projects Mobile Shop 1.0 via the email parameter in /login.php. Multiple connected records confirm remote exploitation potential and that the exploit has been publicly disclosed. Impact is described as potentially enabling data theft or ma...