CVE-2024-25223

CVE-2024-25223 affects Simple Admin Panel App v1.0. A SQL injection in the orderID parameter of /adminView/viewEachOrder.php is documented, with CVSS v3.1 base score 9.8 (CRITICAL) affecting confidentiality, integrity, and availability. Connected sources consistently identify the same vector. A f...

CVE-2024-12936

code-projects Simple Admin Panel 1.0 is affected by a SQL injection in the catDeleteController.php file. The vulnerability arises from improper handling of the record parameter, allowing an attacker to manipulate this input remotely over the network. Exploitation has been disclosed publicly, indi...

CVE-2024-12938

CVE-2024-12938 affects code-projects Simple Admin Panel 1.0, with a vulnerability in the updateOrderStatus.php file. The issue arises from unsafely handling the record argument, leading to SQL injection. Exploitation is described as remote, and public disclosure of the exploit is noted in multipl...

CVE-2024-12935

The CVE-2024-12935 entry concerns code-projects Simple Admin Panel 1.0. The vulnerability is a SQL injection in the editItemForm.php file, affecting the argument record and allowing remote exploitation. Multiple sources (NVD, CVE records, and vendor feeds) confirm the flaw and its critical classi...