abdurrab5 vulnerabilities

Products

• online-makeup-store 3

Latest abdurrab5 CVEs

Newest publication first

1. CVE-2026-96603 Abdurrab5 online-makeup-store Admin functions.php confirm_user authorization

   Published 2026-09-23

   Medium·CVSS 6.9 EPSS 0.47%

   A vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function confirm_logged_in/confirm_user of the file functions.php of the component Admin Handler. Such manipulation of the argument adminid leads to missing authorization. The attack may be performed...

2. CVE-2026-96602 Abdurrab5 online-makeup-store Customer Login customerSignin.php sql injection

   Published 2026-09-23

   Medium·CVSS 6.9 EPSS 0.41%

   A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This manipulation of the argument username/password causes sql injection. The attack is possible to be carried out remo...

3. CVE-2026-96601 Abdurrab5 online-makeup-store Admin Login index.php sql injection

   Published 2026-09-23

   Medium·CVSS 6.9 EPSS 0.41%

   A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is n...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.