Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:online_eyewear_shop:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductOnline Eyewear Shop (e8874ae9-76d9-5e5d-b788-af414391b716)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9974 vulnerable 2026-06-08 07:00:28.987779 SourceCodester Online Eyewear Shop POST Request Master.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php?f=add_to_card of the component POST Request Handler. The manipulation of the argument product_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-10-15T09:31:07.285Z
Updated: 2024-10-15T13:38:39.869Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9973 vulnerable 2026-06-08 07:00:28.987237 SourceCodester Online Eyewear Shop Report Viewing Page page sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=reports of the component Report Viewing Page. The manipulation of the argument date leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-10-15T09:31:05.293Z
Updated: 2024-10-15T13:40:05.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9952 vulnerable 2026-06-08 07:00:28.966700 SourceCodester Online Eyewear Shop Contact Information Page contact_info cross site scripting
LOW (2.4)
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=system_info/contact_info of the component Contact Information Page. The manipulation of the argument Address leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2024-10-15T02:00:06.101Z
Updated: 2024-10-15T15:51:22.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9906 vulnerable 2026-06-08 07:00:28.884168 SourceCodester Online Eyewear Shop cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /admin/?page=inventory/view_inventory&id=2. The manipulation of the argument Code leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-10-13T04:00:06.743Z
Updated: 2024-10-15T14:18:06.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9905 vulnerable 2026-06-08 07:00:28.883547 SourceCodester Online Eyewear Shop sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /admin/?page=inventory/view_inventory&id=2. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-10-13T02:31:04.538Z
Updated: 2024-10-17T19:54:44.328Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.