code-projects online shopping system vulnerabilities

Latest code-projects online shopping system CVEs

Newest publication first

1. CVE-2026-85643 code-projects Online Shopping System adduser.php mysqli_query sql injection

   Published 2026-09-04

   Medium·CVSS 5.1 EPSS 0.35%

   A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqli_query of the file admin/adduser.php. Executing a manipulation of the argument mobile can lead to sql injection. The attack may be performed from remote. The exploit has been publish...

2. CVE-2026-82701 code-projects Online Shopping System Search Functionality action.php sql injection

   Published 2026-08-31

   Medium·CVSS 6.9 EPSS 0.43%

   A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initia...

3. CVE-2026-82700 code-projects Online Shopping System Newsletter Subscription offersmail.php cross site scripting

   Published 2026-08-31

   Medium·CVSS 5.3 EPSS 0.47%

   A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription. The manipulation of the argument email results in cross site scripting. The atta...

4. CVE-2026-79793 code-projects Online Shopping System sumit_form.php cross site scripting

   Published 2026-08-25

   Medium·CVSS 5.3 EPSS 0.47%

   A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumit_form.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely....

5. CVE-2026-19998 code-projects Online Shopping System offersmail.php cross site scripting

   Published 2026-08-17

   Medium·CVSS 5.3 EPSS 0.47%

   A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been m...

6. CVE-2026-19923 code-projects Online Shopping System checkout_process.php sql injection

   Published 2026-08-16

   Medium·CVSS 5.3 EPSS 0.33%

   A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkout_process.php. Executing a manipulation of the argument total_count can lead to sql injection. The attack can be launched remotely. The exploit has been ma...

7. CVE-2026-19922 code-projects Online Shopping System checkout.php cross site scripting

   Published 2026-08-16

   Medium·CVSS 5.1 EPSS 0.35%

   A security flaw has been discovered in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /checkout.php. Performing a manipulation of the argument amount_1 results in cross site scripting. The attack can be initiated remotel...

8. CVE-2026-19921 code-projects Online Shopping System homeaction.php sql injection

   Published 2026-08-16

   Medium·CVSS 5.3 EPSS 0.33%

   A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipulation of the argument cat_id leads to sql injection. It is possible to launch the attack remotely. The e...

9. CVE-2026-19920 code-projects Online Shopping System action.php sql injection

   Published 2026-08-15

   Medium·CVSS 5.3 EPSS 0.33%

   A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown function of the file /action.php. This manipulation of the argument proId causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclos...

10. CVE-2026-19919 code-projects Online Shopping System Login login.php sql injection

    Published 2026-08-15

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an unknown function of the file /login.php of the component Login. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit has been ma...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.