CVE-2024-9906

The CVE-2024-9906 entry affects SourceCodester Online Eyewear Shop 1.0. The vulnerability exists in the admin endpoint /admin/?page=inventory/view_inventory&id=2 where manipulating the Code argument triggers cross-site scripting. It can be exploited remotely and has been disclosed publicly. Affec...

CVE-2024-9082

SourceCodester Online Eyewear Shop v1.0 has a documented vulnerability in the User Creation Handler (file path variants: /classes/Users.php?f=save or /Users.phpf=save). The root cause is improper authorization triggered by manipulating the type argument (value 1), which can be exploited remotely....

CVE-2025-3692

CVE-2025-3692 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability lies in an unknown functionality exercised by the file /oews/classes/Master.php?f=save_product, enabling cross-site scripting. The attack is possible remotely and the exploit has been disclosed publicly. Connected sou...

CVE-2025-3817

CVE-2025-3817 affects SourceCodester Online Eyewear Shop 1.0. The issue resides in /oews/classes/Master.php?f=delete_stock, where manipulating the argument ID leads to a SQL injection. Public exploits are available; exploitation can be remote with no user interaction. CVSS data from multiple sour...

CVE-2023-0673

CVE-2023-0673 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability is an SQL injection in the vulnerable endpoint oews/?p=products/view_product.php (and variants in related docs) triggered by manipulating the id argument. Exploitation is described as remote with high attack complexit...

CVE-2025-3018

CVE-2025-3018 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability exists in an unknown function of the file /classes/Users.php?f=delete, where manipulation of the ID parameter leads to SQL injection. It is possible to exploit remotely; the exploit has been disclosed publicly. Connec...

CVE-2025-3297

The CVE tracks a cross-site scripting (XSS) vulnerability in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of /classes/Master.php?f=save_product, where manipulating the brand parameter can trigger XSS. The issue can be exploited remotely and the public exploit is noted i...

CVE-2023-0686

CVE-2023-0686 affects SourceCodester Online Eyewear Shop 1.0. The SQL injection vulnerability arises in the update_cart function (Master.php?f=update_cart) via the cart_id parameter in the HTTP POST Request Handler. Demonstrated impact is remote exploitation with high severity (CVSSv3.1: 9.8, CRI...

CVE-2025-2846

CVE-2025-2846 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability resides in the registration function at /oews/classes/Users.php?f=registration, where manipulating the ID parameter leads to SQL injection. It is exploitable remotely and the exploit has been disclosed publicly. Conne...

CVE-2025-3296

CVE-2025-3296 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability is an SQL injection caused by improper handling of the ID parameter in /classes/Users.php?f=delete_customer, allowing remote exploitation. Descriptions across multiple sources confirm a critical issue with variant CVS...

CVE-2025-4173

CVE-2025-4173 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability is an SQL injection in the function delete_cart (file /oews/classes/Master.php?f=delete_cart) caused by improper handling of the ID parameter. The issue can be exploited remotely, and public exploit disclosure is note...

CVE-2023-1969

CVE-2023-1969 affects SourceCodester Online Eyewear Shop 1.0. A SQL injection flaw exists in the GET parameter handler for /admin/inventory/manage_stock.php via the id parameter, exploitable remotely without authentication. Documented exploits and public disclosure are noted. Impact on confidenti...

CVE-2024-9317

The CVE-2024-9317 affects SourceCodester Online Eyewear Shop 1.0, specifically the function delete_category in /classes/Master.php?f=delete_category. The vulnerability is an SQL injection triggered by manipulating the id argument, allowing remote exploitation. The public disclosure is noted in th...

CVE-2023-2244

CVE-2023-2244 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability is a SQL injection in the GET Parameter Handler of the file /admin/orders/update_status.php, caused by manipulation of the id parameter. It can be exploited remotely; exploitation has been disclosed publicly (VDB-2272...

CVE-2024-11247

CVE-2024-11247 affects SourceCodester Online Eyewear Shop 1.0, specifically the Inventory Page: Master.php?f=save_product. The vulnerability is a cross-site scripting flaw caused by manipulating the brand parameter in the save_product endpoint. Exploitation can be performed remotely, and multiple...

CVE-2024-9973

CVE-2024-9973 affects SourceCodester Online Eyewear Shop 1.0, specifically the Report Viewing Page component (file /admin/?page=reports). The root cause is a manipulation of the date parameter in the reports query, leading to SQL injection. Impact is described as remote, with high confidentiality...

CVE-2025-0173

CVE-2025-0173 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability is an SQL injection in the /orders/view_order.php script triggered by manipulating the id parameter. The issue can be exploited remotely, and multiple sources note that the exploit has been disclosed to the public. Do...

CVE-2024-9808

CVE-2024-9808 affects SourceCodester Online Eyewear Shop v1.0. The vulnerability is a SQL injection in an unknown function of the file /admin/?page=products/view_product via the id argument, allowing remote exploitation. Multiple sources confirm a public exploit/disclosure. Some reports (PT-2024-...

CVE-2023-0732

CVE-2023-0732 affects SourceCodester Online Eyewear Shop 1.0, specifically the registration flow in oews/classes/Users.php (POST Request Handler). The vulnerability arises from input handling of the fields firstname, middlename, lastname, email, and contact, enabling cross-site scripting. Exploit...

CVE-2024-9952

CVE-2024-9952 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability is in the Contact Information Page (file path /admin/?page=system_info/contact_info) where manipulation of the Address parameter can lead to cross-site scripting. It may be exploited remotely and is cited with varied ...

CVE-2025-3298

CVE-2025-3298 affects SourceCodester Online Eyewear Shop 1.0. The issue resides in the Registration Handler’s file /oews/classes/Master.php?f=save_product, where manipulating the email argument leads to improper access controls. The vulnerability is remotely exploitable and exploitation has been ...

CVE-2025-2651

CVE-2025-2651 affects SourceCodester Online Eyewear Shop 1.0, with exposure of information via directory listing in an unknown function under /oews/admin/. The attack is described as remotely executable and affects multiple sub-directories. Connected sources consistently state a directory listing...

CVE-2024-5894

CVE-2024-5894 affects SourceCodester Online Eyewear Shop 1.0, specifically the manage_product.php file. The vulnerability arises from manipulation of the id parameter, leading to SQL injection and enabling remote exploitation. Documents consistently describe a critical/high-severity issue with po...

CVE-2024-9905

SourceCodester Online Eyewear Shop 1.0 contains a SQL injection vulnerability affecting the admin endpoint /admin/?page=inventory/view_inventory&id=2. The flaw arises from unsafely processing the id parameter, allowing remote attackers to manipulate the query. Multiple connected feeds corroborate...

CVE-2024-9081

CVE-2024-9081 affects SourceCodester Online Eyewear Shop 1.0. The issue is in the view_category.php functionality, where manipulating the id parameter leads to SQL injection. The vulnerability can be interacted with remotely, and multiple sources note that exploits have been disclosed publicly. A...

CVE-2024-9974

The CVE-2024-9974 entry concerns SourceCodester Online Eyewear Shop 1.0. Affected functionality is in the POST Request Handler, specifically the file classes/Master.php?f=add_to_card, where manipulating the product_id parameter leads to SQL injection. Remote exploitation is possible and public ex...

CVE-2023-0966

SourceCodester Online Eyewear Shop 1.0 contains a Cross-Site Scripting vulnerability in the admin/?page=orders/view_order endpoint, triggered by manipulating the id parameter. The issue is exploitable remotely and publicly disclosed. Affected component: file admin/?page=orders/view_order; root ca...

CVE-2024-8949

Affected software: SourceCodester Online Eyewear Shop 1.0. Vulnerable component/file: Cart Content Handler, specifically the unknown part of /classes/Master.php. Root cause: manipulation of the argument cart_id/id leading to improper ownership management. Impact: remote initiation possible; explo...

CVE-2024-9809

CVE-2024-9809 affects SourceCodester Online Eyewear Shop 1.0, specifically the delete_product function in /classes/Master.php?f=delete_product. The vulnerability arises from unsafely handling the id parameter, enabling SQL injection that can be exploited remotely. Public exploit disclosures exist...