e-commerce_website vulnerabilities
CVEs whose affected-version data names the e-commerce_website package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
14 CVEsRSS
CVE-2025-12335Medium· 4.3A vulnerability was determined in code-projects E-Commerce Website 1.0
A vulnerability was determined in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supplier_update.php. This manipulation of the argument supp_name/supp_address causes cr…
CVE-2025-12334Medium· 4.3A vulnerability was found in code-projects E-Commerce Website 1.0
A vulnerability was found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument prod_name/prod_desc/prod_cost results in cross site scripting. It is …
CVE-2025-12333Medium· 4.3A vulnerability has been found in code-projects E-Commerce Website 1.0
A vulnerability has been found in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/supplier_add.php. The manipulation of the argument supp_name/supp_address leads to cross site scripting. It is po…
CVE-2025-11596High· 7.3A vulnerability was determined in code-projects E-Commerce Website 1.0
A vulnerability was determined in code-projects E-Commerce Website 1.0. The affected element is an unknown function of the file /pages/delete_order_details.php. Executing manipulation of the argument order_id can lead to sql injection. T…
CVE-2025-11597Medium· 6.3A vulnerability was identified in code-projects E-Commerce Website 1.0
A vulnerability was identified in code-projects E-Commerce Website 1.0. The impacted element is an unknown function of the file /pages/product_add_qty.php. The manipulation of the argument prod_id leads to sql injection. The attack is po…
CVE-2025-11558High· 7.3A vulnerability was found in code-projects E-Commerce Website 1.0
A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/user_index_search.php. Performing manipulation of the argument Search results in sql injection. The attack is possible …
CVE-2025-11513High· 7.3A vulnerability was determined in code-projects E-Commerce Website 1.0
A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplier_update.php. This manipulation of the argument supp_id causes sql injection. The attack is possible to be car…
CVE-2025-11511Medium· 6.3A flaw has been found in code-projects E-Commerce Website 1.0
A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplier_add.php. Executing manipulation of the argument supp_email can lead to sql injection. The attack may be launched r…
CVE-2025-11509Medium· 6.3A vulnerability was detected in code-projects E-Commerce Website 1.0
A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/product_add.php. Performing manipulation of the argument prod_name results in sql injection. The attack may be init…
CVE-2025-11420High· 7.3A vulnerability was detected in code-projects E-Commerce Website 1.0
A vulnerability was detected in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/edit_order_details.php. The manipulation of the argument order_id results in sql injection. The attack may be launch…
CVE-2025-11036High· 7.3A vulnerability was identified in code-projects E-Commerce Website 1.0
A vulnerability was identified in code-projects E-Commerce Website 1.0. This affects an unknown function of the file /pages/admin_account_update.php. Such manipulation of the argument user_id leads to sql injection. The attack can be lau…
CVE-2025-11037High· 7.3A security flaw has been discovered in code-projects E-Commerce Website 1.0
A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/admin_index_search.php. Performing manipulation of the argument Search results in sql injection. The attack …
CVE-2025-10616Medium· 6.3A security flaw has been discovered in itsourcecode E-Commerce Website 1.0
A security flaw has been discovered in itsourcecode E-Commerce Website 1.0. Affected is an unknown function of the file /admin/users.php. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit h…
CVE-2025-10615Medium· 6.3A vulnerability was identified in itsourcecode E-Commerce Website 1.0
A vulnerability was identified in itsourcecode E-Commerce Website 1.0. This impacts an unknown function of the file /admin/products.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit is …