CVE Intelligence

Code-projects Simple Shopping Cart vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Code-projects Simple Shopping Cart: 3 record(s), with affected versions and fixes.

CVE-2025-14248 Critical · 9.8 CWE-89 Dec 8, 2025
code-projects Simple Shopping Cart adminlogin.php sql injection
A vulnerability was identified in code-projects Simple Shopping Cart 1.0. Impacted is an unknown function of the file /adminlogin.php. The manipulation of the argument admin_username leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
CVE-2025-14247 Critical · 9.8 CWE-89 Dec 8, 2025
code-projects Simple Shopping Cart additems.php sql injection
A vulnerability was determined in code-projects Simple Shopping Cart 1.0. This issue affects some unknown processing of the file /Admin/additems.php. Executing manipulation of the argument item_name can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2025-14246 Critical · 9.8 CWE-89 Dec 8, 2025
code-projects Simple Shopping Cart settings.php sql injection
A vulnerability was found in code-projects Simple Shopping Cart 1.0. This vulnerability affects unknown code of the file /Customers/settings.php. Performing manipulation of the argument user_id results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.