Code-projects Simple Shopping Cart vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Code-projects Simple Shopping Cart: 3 record(s), with affected versions and fixes.
CVE-2025-14248
Critical · 9.8
CWE-89 Dec 8, 2025
code-projects Simple Shopping Cart adminlogin.php sql injection
A vulnerability was identified in code-projects Simple Shopping Cart 1.0. Impacted is an unknown function of the file /adminlogin.php. The manipulation of the argument admin_username leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
CVE-2025-14247
Critical · 9.8
CWE-89 Dec 8, 2025
code-projects Simple Shopping Cart additems.php sql injection
A vulnerability was determined in code-projects Simple Shopping Cart 1.0. This issue affects some unknown processing of the file /Admin/additems.php. Executing manipulation of the argument item_name can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2025-14246
Critical · 9.8
CWE-89 Dec 8, 2025
code-projects Simple Shopping Cart settings.php sql injection
A vulnerability was found in code-projects Simple Shopping Cart 1.0. This vulnerability affects unknown code of the file /Customers/settings.php. Performing manipulation of the argument user_id results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.