Show filters
104 Total Results
Displaying 81-90 of 104
Sort by:
Attacker Value
Unknown

CVE-2022-40935

Disclosure Date: September 22, 2022 (last updated February 24, 2025)
Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /pet_shop/classes/Master.php?f=delete_category,id.
Attacker Value
Unknown

CVE-2022-40934

Disclosure Date: September 22, 2022 (last updated February 24, 2025)
Online Pet Shop We App v1.0 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_sub_category,id
Attacker Value
Unknown

CVE-2022-40933

Disclosure Date: September 22, 2022 (last updated February 24, 2025)
Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_order,id.
Attacker Value
Unknown

CVE-2021-43110

Disclosure Date: March 29, 2022 (last updated October 07, 2023)
An Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021 in add_products.
Attacker Value
Unknown

CVE-2021-43109

Disclosure Date: March 29, 2022 (last updated February 23, 2025)
An SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021 via the p parameter in product.php.
Attacker Value
Unknown

CVE-2021-46110

Disclosure Date: February 18, 2022 (last updated February 23, 2025)
Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno parameters.
Attacker Value
Unknown

CVE-2021-46024

Disclosure Date: January 23, 2022 (last updated February 23, 2025)
Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cart_add.php, No login is required.
Attacker Value
Unknown

CVE-2021-43158

Disclosure Date: December 22, 2021 (last updated February 23, 2025)
In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart.
Attacker Value
Unknown

CVE-2021-43157

Disclosure Date: December 22, 2021 (last updated February 23, 2025)
Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cart_remove.php.
Attacker Value
Unknown

CVE-2021-37807

Disclosure Date: October 27, 2021 (last updated February 23, 2025)
An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the email parameter on the /check_availability.php endpoint that serves as a checker whether a new user's email is already exist within the database.