Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:e-commerce_website:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductE Commerce Website (4215509b-3946-5bac-ba6c-354b41e4d62c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-12335 vulnerable 2026-06-08 07:04:30.045896 code-projects E-Commerce Website supplier_update.php cross site scripting
MEDIUM (4.3)
A vulnerability was determined in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supplier_update.php. This manipulation of the argument supp_name/supp_address causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-10-27T23:32:05.507Z
Updated: 2025-10-28T14:28:38.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12334 vulnerable 2026-06-08 07:04:30.045403 code-projects E-Commerce Website product_add.php cross site scripting
MEDIUM (4.3)
A vulnerability was found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument prod_name/prod_desc/prod_cost results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Published: 2025-10-27T22:32:11.542Z
Updated: 2025-10-28T19:50:33.682Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12333 vulnerable 2026-06-08 07:04:30.045023 code-projects E-Commerce Website supplier_add.php cross site scripting
MEDIUM (4.3)
A vulnerability has been found in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/supplier_add.php. The manipulation of the argument supp_name/supp_address leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-10-27T22:32:08.847Z
Updated: 2025-10-28T19:49:34.911Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11597 vulnerable 2026-06-08 07:04:28.569023 code-projects E-Commerce Website product_add_qty.php sql injection
MEDIUM (6.3)
A vulnerability was identified in code-projects E-Commerce Website 1.0. The impacted element is an unknown function of the file /pages/product_add_qty.php. The manipulation of the argument prod_id leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Published: 2025-10-11T11:02:06.027Z
Updated: 2025-10-14T14:06:55.686Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11596 vulnerable 2026-06-08 07:04:28.568411 code-projects E-Commerce Website delete_order_details.php sql injection
HIGH (7.3)
A vulnerability was determined in code-projects E-Commerce Website 1.0. The affected element is an unknown function of the file /pages/delete_order_details.php. Executing manipulation of the argument order_id can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-10-11T10:02:05.943Z
Updated: 2025-10-14T14:08:43.560Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11558 vulnerable 2026-06-08 07:04:28.497444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11513 vulnerable 2026-06-08 07:04:28.286250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11511 vulnerable 2026-06-08 07:04:28.285312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11509 vulnerable 2026-06-08 07:04:28.282841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11420 vulnerable 2026-06-08 07:02:28.729948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11094 vulnerable 2026-06-08 07:02:28.052071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11037 vulnerable 2026-06-08 07:02:27.965624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11036 vulnerable 2026-06-08 07:02:27.965042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10793 vulnerable 2026-06-08 07:02:27.523890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7108 vulnerable 2026-06-08 06:21:57.069176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7107 vulnerable 2026-06-08 06:21:57.068387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7106 vulnerable 2026-06-08 06:21:57.065727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7105 vulnerable 2026-06-08 06:21:57.062939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.