Approved changes feed: RSS · Atom

cpe:2.3:a:codezips:online_shopping_portal:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCodezips (d6987edb-dda5-55fa-ba47-db9343ba86ca)
ProductOnline Shopping Portal (0a4c2c7b-f078-5f62-af36-72bf886f512c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9794 vulnerable 2026-06-03 14:58:22.609073 Codezips Online Shopping Portal update-image1.php unrestricted upload
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in Codezips Online Shopping Portal 1.0. This issue affects some unknown processing of the file /update-image1.php. The manipulation of the argument productimage1 leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-10-10T16:00:07.327Z
Updated: 2024-10-10T16:27:19.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9460 vulnerable 2026-06-03 14:58:21.539657 Codezips Online Shopping Portal index.php sql injection
HIGH (7.3)
A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-10-03T14:31:04.335Z
Updated: 2024-10-03T15:19:45.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9038 vulnerable 2026-06-03 14:58:20.361029 Codezips Online Shopping Portal insert-product.php unrestricted upload
MEDIUM (4.3)
A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-09-20T16:00:06.215Z
Updated: 2024-09-20T16:19:43.165Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.