Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:simple_admin_panel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductSimple Admin Panel (4468d6ff-8d12-569b-9c95-c78bf4ee699d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12938 vulnerable 2026-06-03 14:54:23.445098 code-projects Simple Admin Panel updateOrderStatus.php sql injection
MEDIUM (6.3)
A vulnerability has been found in code-projects Simple Admin Panel 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file updateOrderStatus.php. The manipulation of the argument record leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-12-26T06:00:09.848Z
Updated: 2024-12-26T21:28:53.669Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12937 vulnerable 2026-06-03 14:54:23.444626 code-projects Simple Admin Panel addVariationController.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. Affected is an unknown function of the file addVariationController.php. The manipulation of the argument qty leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-12-26T05:31:04.519Z
Updated: 2024-12-26T16:56:23.641Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12936 vulnerable 2026-06-03 14:54:23.444195 code-projects Simple Admin Panel catDeleteController.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in code-projects Simple Admin Panel 1.0. This issue affects some unknown processing of the file catDeleteController.php. The manipulation of the argument record leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-12-26T05:00:13.776Z
Updated: 2024-12-26T17:01:45.195Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12935 vulnerable 2026-06-03 14:54:23.443751 code-projects Simple Admin Panel editItemForm.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in code-projects Simple Admin Panel 1.0. This vulnerability affects unknown code of the file editItemForm.php. The manipulation of the argument record leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-12-26T04:31:04.934Z
Updated: 2024-12-26T17:20:08.858Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12934 vulnerable 2026-06-03 14:54:23.443317 code-projects Simple Admin Panel updateItemController.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in code-projects Simple Admin Panel 1.0. This affects an unknown part of the file updateItemController.php. The manipulation of the argument p_desk leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-12-26T04:00:13.261Z
Updated: 2024-12-26T17:50:45.352Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12933 vulnerable 2026-06-03 14:54:23.442697 code-projects Simple Admin Panel updateItemController.php cross site scripting
LOW (3.5)
A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file updateItemController.php. The manipulation of the argument p_name/p_desc leads to cross site scripting. The attack may be launched remotely.
Published: 2024-12-26T03:31:04.753Z
Updated: 2024-12-26T18:07:00.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12932 vulnerable 2026-06-03 14:54:23.442256 code-projects Simple Admin Panel addSizeController.php cross site scripting
LOW (3.5)
A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file addSizeController.php. The manipulation of the argument size leads to cross site scripting. The attack can be launched remotely.
Published: 2024-12-26T03:00:10.661Z
Updated: 2024-12-26T18:07:53.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12931 vulnerable 2026-06-03 14:54:23.441809 code-projects Simple Admin Panel addCatController.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been classified as critical. Affected is an unknown function of the file /addCatController.php. The manipulation of the argument size leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-12-26T02:31:04.794Z
Updated: 2024-12-26T18:08:40.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12930 vulnerable 2026-06-03 14:54:23.441332 code-projects Simple Admin Panel addCatController.php cross site scripting
LOW (3.5)
A vulnerability was found in code-projects Simple Admin Panel 1.0 and classified as problematic. This issue affects some unknown processing of the file addCatController.php. The manipulation of the argument c_name leads to cross site scripting. The attack may be initiated remotely.
Published: 2024-12-26T01:00:09.887Z
Updated: 2024-12-27T14:43:28.743Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12928 vulnerable 2026-06-03 14:54:23.436916 code-projects Simple Admin Panel sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. This affects an unknown part. The manipulation of the argument c_name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-12-25T23:31:04.623Z
Updated: 2024-12-27T14:49:35.225Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.