CVE-2025-69565

The code-projects Mobile Shop Management System 1.0 is vulnerable to an Unrestricted Upload of File with Dangerous Type (File Upload) within the /ExAddProduct.php file. This vulnerability allows for the upload of potentially malicious files, which can lead to significant security risks. Exploitat...

CVE-2025-69562

The code-projects Mobile Shop Management System 1.0 is vulnerable to an SQL Injection vulnerability. The root cause is the improper handling of the userid parameter within the /insertmessage.php file. This vulnerability could allow an attacker to execute arbitrary SQL commands. Exploitation detai...

CVE-2025-9841

The CVE-2025-9841 vulnerability affects code-projects Mobile Shop Management System 1.0, specifically AddNewProduct.php. It permits unrestricted upload by manipulating the ProductImage parameter, enabling remote exploitation. Multiple connected sources describe the issue consistently, citing that...

CVE-2025-69563

The code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection due to the improper handling of the Password parameter in the /ExLogin.php file. This vulnerability allows an attacker to execute malicious SQL commands, potentially leading to unauthorized data access or manipulat...

CVE-2025-69564

The code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection within the /ExAddNewUser.php component. The flaw is caused by the improper handling of several parameters, specifically: Name, Address, email, UserName, Password, confirm_password, Role, Branch, and Activate. An at...