Fabian

E-commerce Website

17 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2025-12335

Exploit
  • EPSS 0.05%
  • Veröffentlicht 27.10.2025 23:32:05
  • Zuletzt bearbeitet 31.10.2025 20:38:41

A vulnerability was determined in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supplier_update.php. This manipulation of the argument supp_name/supp_address causes cross site scri...

6.1

CVE-2025-12334

Exploit
  • EPSS 0.05%
  • Veröffentlicht 27.10.2025 22:32:11
  • Zuletzt bearbeitet 31.10.2025 20:39:32

A vulnerability was found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument prod_name/prod_desc/prod_cost results in cross site scripting. It is possible to l...

6.1

CVE-2025-12333

Exploit
  • EPSS 0.05%
  • Veröffentlicht 27.10.2025 22:32:08
  • Zuletzt bearbeitet 30.10.2025 19:58:44

A vulnerability has been found in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/supplier_add.php. The manipulation of the argument supp_name/supp_address leads to cross site scripting. It is possible to ini...

9.8

CVE-2025-11597

Exploit
  • EPSS 0.04%
  • Veröffentlicht 11.10.2025 11:15:32
  • Zuletzt bearbeitet 23.10.2025 20:06:00

A vulnerability was identified in code-projects E-Commerce Website 1.0. The impacted element is an unknown function of the file /pages/product_add_qty.php. The manipulation of the argument prod_id leads to sql injection. The attack is possible to be ...

9.8

CVE-2025-11596

Exploit
  • EPSS 0.04%
  • Veröffentlicht 11.10.2025 10:15:42
  • Zuletzt bearbeitet 23.10.2025 20:06:00

A vulnerability was determined in code-projects E-Commerce Website 1.0. The affected element is an unknown function of the file /pages/delete_order_details.php. Executing manipulation of the argument order_id can lead to sql injection. The attack can...

9.8

CVE-2025-11558

Exploit
  • EPSS 0.04%
  • Veröffentlicht 09.10.2025 21:02:08
  • Zuletzt bearbeitet 23.10.2025 20:06:00

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/user_index_search.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried...

9.8

CVE-2025-11513

Exploit
  • EPSS 0.06%
  • Veröffentlicht 08.10.2025 23:32:08
  • Zuletzt bearbeitet 10.10.2025 16:48:36

A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplier_update.php. This manipulation of the argument supp_id causes sql injection. The attack is possible to be carried out remo...

9.8

CVE-2025-11511

Exploit
  • EPSS 0.04%
  • Veröffentlicht 08.10.2025 23:15:31
  • Zuletzt bearbeitet 14.10.2025 15:16:03

A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplier_add.php. Executing manipulation of the argument supp_email can lead to sql injection. The attack may be launched remotely. The ...

9.8

CVE-2025-11509

Exploit
  • EPSS 0.04%
  • Veröffentlicht 08.10.2025 22:32:07
  • Zuletzt bearbeitet 14.10.2025 15:16:03

A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/product_add.php. Performing manipulation of the argument prod_name results in sql injection. The attack may be initiated remotel...

9.8

CVE-2025-11420

Exploit
  • EPSS 0.04%
  • Veröffentlicht 08.10.2025 00:32:05
  • Zuletzt bearbeitet 09.10.2025 16:25:39

A vulnerability was detected in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/edit_order_details.php. The manipulation of the argument order_id results in sql injection. The attack may be launched remotely. ...