Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:online_shoe_store:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductOnline Shoe Store (dde888b0-b08d-5211-95a0-dbee8e07fddc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5836 vulnerable 2026-06-03 15:27:54.292016 code-projects Online Shoe Store admin_product.php cross site scripting
LOW (2.4)
A vulnerability has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_product.php. The manipulation of the argument product_name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-04-09T03:00:20.635Z
Updated: 2026-04-09T13:37:58.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5835 vulnerable 2026-06-03 15:27:54.291510 code-projects Online Shoe Store admin_football.php cross site scripting
LOW (2.4)
A flaw has been found in code-projects Online Shoe Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin_football.php. Executing a manipulation of the argument product_name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.
Published: 2026-04-09T02:45:10.553Z
Updated: 2026-04-09T14:52:50.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5834 vulnerable 2026-06-03 15:27:54.290979 code-projects Online Shoe Store admin_running.php cross site scripting
LOW (2.4)
A vulnerability was detected in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /admin/admin_running.php. Performing a manipulation of the argument product_name results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Published: 2026-04-09T02:30:11.420Z
Updated: 2026-04-09T16:16:01.004Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5647 vulnerable 2026-06-03 15:26:27.446765 code-projects Online Shoe Store Add Product admin_feature.php cross site scripting
LOW (2.4)
A vulnerability was detected in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/admin_feature.php of the component Add Product Page. The manipulation of the argument product_name results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.
Published: 2026-04-06T10:45:10.119Z
Updated: 2026-04-06T18:32:40.211Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6354 vulnerable 2026-06-03 15:12:27.434918 code-projects Online Shoe Store customer_signup.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /function/customer_signup.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T16:31:07.092Z
Updated: 2025-06-23T15:29:51.297Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6344 vulnerable 2026-06-03 15:12:27.376535 code-projects Online Shoe Store contactus.php sql injection
HIGH (7.3)
A vulnerability has been found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /contactus.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T14:00:15.853Z
Updated: 2025-06-20T14:29:56.862Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6343 vulnerable 2026-06-03 15:12:27.375962 code-projects Online Shoe Store admin_product.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, was found in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /admin/admin_product.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T13:31:05.644Z
Updated: 2025-06-23T20:27:45.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6342 vulnerable 2026-06-03 15:12:27.375483 code-projects Online Shoe Store admin_football.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. This issue affects some unknown processing of the file /admin/admin_football.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T13:00:17.504Z
Updated: 2025-06-20T13:24:06.207Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6317 vulnerable 2026-06-03 15:12:27.312182 code-projects Online Shoe Store confirm.php sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/confirm.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T07:31:05.418Z
Updated: 2025-06-23T20:21:23.844Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6316 vulnerable 2026-06-03 15:12:27.311776 code-projects Online Shoe Store admin_running.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/admin_running.php. The manipulation of the argument qty leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T07:00:14.778Z
Updated: 2025-06-20T19:18:38.551Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6315 vulnerable 2026-06-03 15:12:27.311294 code-projects Online Shoe Store cart2.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Online Shoe Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /cart2.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T07:00:12.940Z
Updated: 2025-06-20T19:22:52.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6307 vulnerable 2026-06-03 15:12:27.299848 code-projects Online Shoe Store edit_customer.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file /function/edit_customer.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-06-20T04:31:05.819Z
Updated: 2025-06-20T15:36:05.437Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6306 vulnerable 2026-06-03 15:12:27.299315 code-projects Online Shoe Store admin_index.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Online Shoe Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/admin_index.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T04:00:12.225Z
Updated: 2025-06-23T19:28:24.772Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6305 vulnerable 2026-06-03 15:12:27.298751 code-projects Online Shoe Store admin_feature.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Online Shoe Store 1.0. It has been classified as critical. This affects an unknown part of the file /admin/admin_feature.php. The manipulation of the argument product_code leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T03:31:07.465Z
Updated: 2025-06-23T19:28:36.387Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6304 vulnerable 2026-06-03 15:12:27.298255 code-projects Online Shoe Store cart.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /cart.php. The manipulation of the argument qty[] leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T03:31:05.744Z
Updated: 2025-06-23T19:28:43.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6303 vulnerable 2026-06-03 15:12:27.296336 code-projects Online Shoe Store contactus1.php sql injection
HIGH (7.3)
A vulnerability has been found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /contactus1.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-20T03:00:18.507Z
Updated: 2025-06-20T19:40:50.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0208 vulnerable 2026-06-03 14:58:23.997816 code-projects Online Shoe Store summary.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /summary.php. The manipulation of the argument tid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-04T13:00:11.697Z
Updated: 2025-01-06T16:27:22.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0207 vulnerable 2026-06-03 14:58:23.997344 code-projects Online Shoe Store login.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /function/login.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-04T12:31:04.814Z
Updated: 2025-01-06T16:27:51.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0206 vulnerable 2026-06-03 14:58:23.996711 code-projects Online Shoe Store index.php access control
MEDIUM (5.3)
A vulnerability classified as critical was found in code-projects Online Shoe Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-04T12:00:17.309Z
Updated: 2025-01-06T16:28:20.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0205 vulnerable 2026-06-03 14:58:23.996016 code-projects Online Shoe Store details2.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /details2.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-04T09:00:09.858Z
Updated: 2025-01-06T16:33:04.542Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0204 vulnerable 2026-06-03 14:58:23.994814 code-projects Online Shoe Store details.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file /details.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-01-04T07:31:05.457Z
Updated: 2025-01-06T16:28:48.399Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.