Vendorsoretnom23online_computer_and_laptop_store1.0
Vulnerabilities

oretnom23 Online Computer And Laptop Store 1.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

32CVEs
CVE-2023-1826
SourceCodester Online Computer and Laptop Store index.php unrestricted upload
Published 2023-04-04 · Modified
9.81 PoCEPSS 0.044
CVE-2023-31857
Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save.
Published 2023-05-16 · Modified
9.8EPSS 0.015
CVE-2023-31704
Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role.
Published 2023-07-13 · Modified
9.8EPSS 0.013
CVE-2024-4798
SourceCodester Online Computer and Laptop Store manage_brand.php sql injection
Published 2024-05-12 · Analyzed
9.8EPSS 0.009
CVE-2023-1942
SourceCodester Online Computer and Laptop Store Avatar unrestricted upload
Published 2023-04-07 · Modified
9.8EPSS 0.009
CVE-2023-2658
SourceCodester Online Computer and Laptop Store products.php sql injection
Published 2023-05-11 · Modified
9.8EPSS 0.009
CVE-2023-2661
SourceCodester Online Computer and Laptop Store Master.php sql injection
Published 2023-05-11 · Modified
9.8EPSS 0.008
CVE-2023-2660
SourceCodester Online Computer and Laptop Store view_categories.php sql injection
Published 2023-05-11 · Modified
9.8EPSS 0.008
CVE-2023-2659
SourceCodester Online Computer and Laptop Store view_product.php sql injection
Published 2023-05-11 · Modified
9.8EPSS 0.008
CVE-2023-5373
SourceCodester Online Computer and Laptop Store Master.php register sql injection
Published 2023-10-04 · Modified
9.8EPSS 0.008
CVE-2023-1955
SourceCodester Online Computer and Laptop Store User Registration login.php sql injection
Published 2023-04-08 · Modified
9.8EPSS 0.008
CVE-2023-1951
SourceCodester Online Computer and Laptop Store brand.php delete_brand sql injection
Published 2023-04-08 · Modified
9.8EPSS 0.007
CVE-2023-1958
SourceCodester Online Computer and Laptop Store sql injection
Published 2023-04-08 · Modified
9.8EPSS 0.007
CVE-2023-1952
SourceCodester Online Computer and Laptop Store Product Search ?p=products sql injection
Published 2023-04-08 · Modified
9.8EPSS 0.007
CVE-2023-5374
SourceCodester Online Computer and Laptop Store products.php sql injection
Published 2023-10-04 · Modified
9.8EPSS 0.007
CVE-2024-4820
SourceCodester Online Computer and Laptop Store unrestricted upload
Published 2024-05-13 · Analyzed
8.8EPSS 0.011
CVE-2023-1956
SourceCodester Online Computer and Laptop Store Image path traversal
Published 2023-04-08 · Modified
8.8EPSS 0.011
CVE-2023-2242
SourceCodester Online Computer and Laptop Store GET Parameter sql injection
Published 2023-04-22 · Modified
8.8EPSS 0.007
CVE-2023-1960
SourceCodester Online Computer and Laptop Store sql injection
Published 2023-04-08 · Modified
8.8EPSS 0.007
CVE-2023-1959
SourceCodester Online Computer and Laptop Store sql injection
Published 2023-04-08 · Modified
8.8EPSS 0.007
CVE-2023-1957
SourceCodester Online Computer and Laptop Store Subcategory sql injection
Published 2023-04-08 · Modified
8.8EPSS 0.007
CVE-2023-1954
SourceCodester Online Computer and Laptop Store manage.php save_inventory sql injection
Published 2023-04-08 · Modified
8.8EPSS 0.007
CVE-2023-1953
SourceCodester Online Computer and Laptop Store index.php sql injection
Published 2023-04-08 · Modified
8.8EPSS 0.007
CVE-2024-8083
SourceCodester Online Computer and Laptop Store Master.php sql injection
Published 2024-08-22 · Analyzed
8.8EPSS 0.006
CVE-2023-1987
SourceCodester Online Computer and Laptop Store update_order_status sql injection
Published 2023-04-11 · Modified
7.2EPSS 0.008
CVE-2023-1986
SourceCodester Online Computer and Laptop Store delete_order sql injection
Published 2023-04-11 · Modified
7.2EPSS 0.008
CVE-2023-1985
SourceCodester Online Computer and Laptop Store save_brand sql injection
Published 2023-04-11 · Modified
7.2EPSS 0.008
CVE-2023-2657
SourceCodester Online Computer and Laptop Store products.php cross site scripting
Published 2023-05-11 · Modified
6.1EPSS 0.007
CVE-2023-1857
SourceCodester Online Computer and Laptop Store cross site scripting
Published 2023-04-05 · Modified
6.1EPSS 0.006
CVE-2023-1961
SourceCodester Online Computer and Laptop Store cross site scripting
Published 2023-04-08 · Modified
6.1EPSS 0.005
CVE-2024-8084
SourceCodester Online Computer and Laptop Store Setting SystemSettings.php cross site scripting
Published 2024-08-22 · Analyzed
5.1EPSS 0.005
CVE-2023-1988
SourceCodester Online Computer and Laptop Store cross site scripting
Published 2023-04-11 · Modified
4.8EPSS 0.006