Sup Online Shopping
Approved changes feed: RSS · Atom
cpe:2.3:a:sourcecodester:sup_online_shopping:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551) |
|---|---|
| Product | Sup Online Shopping (4f04481b-8c8a-550c-aa19-5fc285d3fcd2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9377 |
vulnerable | 2026-06-08 08:08:58.933900 |
SourceCodester SUP Online Shopping productedit.php cross site scripting
LOW (2.4)
A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of the file /admin/productedit.php. The manipulation of the argument productName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Published: 2026-05-24T11:00:13.202Z
Updated: 2026-05-29T18:19:30.464Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8131 |
vulnerable | 2026-06-08 08:08:58.133014 |
SourceCodester SUP Online Shopping replymsg.php sql injection
HIGH (7.3)
A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0. This impacts an unknown function of the file /admin/replymsg.php. The manipulation of the argument msgid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-05-08T03:00:18.891Z
Updated: 2026-05-08T23:08:50.680Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8130 |
vulnerable | 2026-06-08 08:08:58.132640 |
SourceCodester SUP Online Shopping message.php sql injection
HIGH (7.3)
A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. This affects an unknown function of the file /admin/message.php. The manipulation of the argument seenid leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Published: 2026-05-08T02:45:09.771Z
Updated: 2026-05-08T11:29:09.929Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8129 |
vulnerable | 2026-06-08 08:08:58.132217 |
SourceCodester SUP Online Shopping wishlist.php sql injection
HIGH (7.3)
A vulnerability was determined in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of the file wishlist.php. Executing a manipulation of the argument delwlistid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Published: 2026-05-08T02:30:11.130Z
Updated: 2026-05-08T13:00:19.618Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8128 |
vulnerable | 2026-06-08 08:08:58.131841 |
SourceCodester SUP Online Shopping viewmsg.php sql injection
HIGH (7.3)
A vulnerability was found in SourceCodester SUP Online Shopping 1.0. The affected element is an unknown function of the file /admin/viewmsg.php. Performing a manipulation of the argument msgid results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Published: 2026-05-08T02:15:09.625Z
Updated: 2026-05-08T21:28:51.228Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.