Vulnerabilidades do SourceCodester Online Shop Project
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam SourceCodester Online Shop Project: 2 registro(s), com versões afetadas e correções.
CVE-2025-13451
Crítica · 9.8
CWE-89 20/11/2025
SourceCodester Online Shop Project action.php sql injection
A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
CVE-2025-13450
Média · 5.4
CWE-79 20/11/2025
SourceCodester Online Shop Project register.php cross site scripting
A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument f_name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.