Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
JanobeE-commerce System

3 matches found

CVE
CVE•added 2024/08/22 11:31 p.m.•65 views

CVE-2024-8089

CVE-2024-8089 affects SourceCodester E-Commerce System v1.0. The vulnerability resides in the unknown function of the file /ecommerce/admin/products/controller.php, where manipulating the photo parameter leads to an unrestricted upload. This enables a remote attacker to upload arbitrary files, wi...

9.8CVSS6.5AI score0.00697EPSS
Web
CVE
CVE•added 2024/08/22 10:31 p.m.•62 views

CVE-2024-8086

SourceCodester E-Commerce System 1.0 Admin Login page (/ecommerce/admin/login.php) is affected by SQL injection via the user_email parameter. The vulnerability enables remote exploitation; multiple sources confirm the issue and public disclosure. Concrete remediation/version details are not provi...

9.8CVSS7.5AI score0.00689EPSS
Web
CVE
CVE•added 2024/08/22 11:0 p.m.•60 views

CVE-2024-8087

CVE-2024-8087 concerns SourceCodester E-Commerce System 1.0. The issue is an SQL injection in the /ecommerce/popup_Item.php page caused by manipulation of the id argument. A remote attacker could potentially exploit this vulnerability, and public disclosure of exploits is indicated. Affected comp...

9.8CVSS7.4AI score0.00599EPSS
Web