CVE-2023-7124

CVE-2023-7124 affects code-projects E-Commerce Site 1.0. the vulnerability is in an unknown function of search.php, where the keyword parameter can be crafted as to trigger a cross-site scripting (XSS). The issue is exploitable remotely and the exploit has been disclosed publicly. Connected sour...

CVE-2025-7175

CVE-2025-7175 affects code-projects E-Commerce Site 1.0. Affected is an unknown function in the file /admin/users_photo.php where manipulating the photo parameter enables unrestricted file upload. This can enable remote execution/impact on confidentiality, integrity, and availability as indicated...

CVE-2025-7756

CVE-2025-7756 describes a cross-site request forgery in code-projects E-Commerce Site 1.0, affecting an unknown function. The flaw enables remote exploitation and the exploit has been disclosed publicly. Several connected sources consistently identify CSRF as the issue; no specific fix version or...

CVE-2025-11094

CVE-2025-11094 affects code-projects E-Commerce Website 1.0. The vulnerability resides in the pages/admin_product_details.php script, where manipulation of the prod_id parameter leads to a SQL injection. The issue is exploitable remotely and has publicly disclosed exploit information. Multiple so...