CVE-2024-9038

CVE-2024-9038 affects Codezips Online Shopping Portal 1.0, specifically the insert-product.php functionality. The vulnerability arises from manipulating the productimage1/productimage2/productimage3 parameters, enabling unrestricted file upload. This remote attack has had its exploit disclosed pu...

CVE-2024-9460

CVE-2024-9460 affects Codezips Online Shopping Portal 1.0. an SQL injection via the username argument in an unknown function of index.php is reported, with remote exploitation and public disclosure. Multiple sources confirm the risk is due to improper handling of the username parameter leading to...

CVE-2024-9794

The CVE-2024-9794 entry concerns Codezips Online Shopping Portal 1.0, where the vulnerability resides in /update-image1.php. The issue arises when manipulating the productimage1 argument, enabling unrestricted upload. The affected component is the file handling logic in update-image1.php, with re...