Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:e-commerce_site:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductE Commerce Site (d0a6db8e-2f7f-5995-a72d-91f26f39f23e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7756 vulnerable 2026-06-08 07:45:18.167212 code-projects E-Commerce Site cross-site request forgery
MEDIUM (4.3)
A vulnerability classified as problematic has been found in code-projects E-Commerce Site 1.0. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-17T20:44:05.924Z
Updated: 2025-07-18T14:19:46.249Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7175 vulnerable 2026-06-08 07:43:18.091164 code-projects E-Commerce Site users_photo.php unrestricted upload
MEDIUM (6.3)
A vulnerability was found in code-projects E-Commerce Site 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/users_photo.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-08T11:02:06.108Z
Updated: 2025-07-08T20:29:19.384Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7124 vulnerable 2026-06-08 06:21:57.086969 code-projects E-Commerce Site search.php cross site scripting
MEDIUM (4.3)
A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input <video/src=x onerror=alert(document.cookie)> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249096.
Published: 2023-12-28T02:31:04.389Z
Updated: 2024-08-02T08:50:08.284Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.