https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-8087.htmlhttps://patchthecve.com/cve/CVE-2024-8087.htmlWed, 17 Jun 2026 08:21:50 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester E-Commerce System 1.0 and classified as critical. This issue affects some unknown processing of the file /ecommerce/popup_Item.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclhttps://patchthecve.com/cve/CVE-2024-8086.htmlhttps://patchthecve.com/cve/CVE-2024-8086.htmlWed, 17 Jun 2026 08:21:50 +0000HIGH 7.3: A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ecommerce/admin/login.php of the component Admin Login. The manipulation of the argument user_email leads to sql injection. The attack can be initiahttps://patchthecve.com/cve/CVE-2023-1569.htmlhttps://patchthecve.com/cve/CVE-2023-1569.htmlWed, 17 Jun 2026 05:28:16 +0000LOW 3.5: A vulnerability classified as problematic was found in SourceCodester E-Commerce System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/user/controller.php?action=edit. The manipulation of the argument U_NAME with the input <script>alert('1')</script> leads to crosshttps://patchthecve.com/cve/CVE-2023-1557.htmlhttps://patchthecve.com/cve/CVE-2023-1557.htmlWed, 17 Jun 2026 05:28:15 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ecommerce/admin/user/controller.php?action=edit of the component Username Handler. The manipulation of the argument USERID leads to imprhttps://patchthecve.com/cve/CVE-2023-1507.htmlhttps://patchthecve.com/cve/CVE-2023-1507.htmlWed, 17 Jun 2026 05:28:07 +0000LOW 3.5: A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /ecommerce/admin/category/controller.php of the component Category Name Handler. The manipulation of the argument CATEGORY leadhttps://patchthecve.com/cve/CVE-2023-1506.htmlhttps://patchthecve.com/cve/CVE-2023-1506.htmlWed, 17 Jun 2026 05:28:07 +0000MEDIUM 5.6: A vulnerability, which was classified as critical, was found in SourceCodester E-Commerce System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument U_USERNAME leads to sql injection. It is possible to launch the attack remotely. The complexity of an attack ihttps://patchthecve.com/cve/CVE-2023-1505.htmlhttps://patchthecve.com/cve/CVE-2023-1505.htmlWed, 17 Jun 2026 05:28:07 +0000MEDIUM 5.0: A vulnerability, which was classified as critical, has been found in SourceCodester E-Commerce System 1.0. This issue affects some unknown processing of the file /ecommerce/admin/settings/setDiscount.php. The manipulation of the argument id with the input 201737 AND (SELECT 8973 FROM (SELECT(SLEEP(5