E-Commerce Website vulnerabilities
14 known vulnerabilities in E-Commerce Website from code-projects. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
E-Commerce Website: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in code-projects E-Commerce Website 1.0. The impacted element is an unknown function of the file /pages/product_add_qty.php. The manipulation of the argument prod_id leads to sql injection. The attack is possible to be carried ou
- 9.8 Critical severity
E-Commerce Website: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects E-Commerce Website 1.0. The affected element is an unknown function of the file /pages/delete_order_details.php. Executing manipulation of the argument order_id can lead to sql injection. The attack can be execut
- 9.8 Critical severity
E-Commerce Website: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/user_index_search.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remot
- 9.8 Critical severity
E-Commerce Website: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplier_update.php. This manipulation of the argument supp_id causes sql injection. The attack is possible to be carried out remotely. The
- 9.8 Critical severity
E-Commerce Website: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplier_add.php. Executing manipulation of the argument supp_email can lead to sql injection. The attack may be launched remotely. The exploit ha
- 9.8 Critical severity
E-Commerce Website: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/product_add.php. Performing manipulation of the argument prod_name results in sql injection. The attack may be initiated remotely. The exp
- 9.8 Critical severity
E-Commerce Website: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/edit_order_details.php. The manipulation of the argument order_id results in sql injection. The attack may be launched remotely. The exploi
- 9.8 Critical severity
E-Commerce Website: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/admin_product_details.php. Such manipulation of the argument prod_id leads to sql injection. The attack may be launched remotely
- 9.8 Critical severity
E-Commerce Website: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/admin_index_search.php. Performing manipulation of the argument Search results in sql injection. The attack may be initiated remote
- 9.8 Critical severity
E-Commerce Website: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in code-projects E-Commerce Website 1.0. This affects an unknown function of the file /pages/admin_account_update.php. Such manipulation of the argument user_id leads to sql injection. The attack can be launched remotely. The exp
- 9.8 Critical severity
E-Commerce Website: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/admin_account_delete.php. Performing manipulation of the argument user_id results in sql injection. It is possib
- 9.8 Critical severity
E-Commerce Website: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file user_signup.php. The manipulation of the argument firstname/middlename/email/address/contact/user
- 8.8 High severity
E-Commerce Website: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects E-Commerce Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file product_details.php?prod_id=11. The manipulation of the argument prod_id leads to sql in
- 9.8 Critical severity
E-Commerce Website: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects E-Commerce Website 1.0. It has been classified as critical. Affected is an unknown function of the file index_search.php. The manipulation of the argument search leads to sql injection. It is possible to launch the at