https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-12335.htmlhttps://patchthecve.com/cve/CVE-2025-12335.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 4.3: A vulnerability was determined in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supplier_update.php. This manipulation of the argument supp_name/supp_address causes cross site scripting. The attack can be initiated remotely. The ehttps://patchthecve.com/cve/CVE-2025-12334.htmlhttps://patchthecve.com/cve/CVE-2025-12334.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 4.3: A vulnerability was found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument prod_name/prod_desc/prod_cost results in cross site scripting. It is possible to launch the attack remotely. The exploit has been mahttps://patchthecve.com/cve/CVE-2025-12333.htmlhttps://patchthecve.com/cve/CVE-2025-12333.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 4.3: A vulnerability has been found in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/supplier_add.php. The manipulation of the argument supp_name/supp_address leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been dihttps://patchthecve.com/cve/CVE-2025-11597.htmlhttps://patchthecve.com/cve/CVE-2025-11597.htmlThu, 08 Oct 2026 13:10:00 +0000MEDIUM 6.3: A vulnerability was identified in code-projects E-Commerce Website 1.0. The impacted element is an unknown function of the file /pages/product_add_qty.php. The manipulation of the argument prod_id leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly avaihttps://patchthecve.com/cve/CVE-2025-11596.htmlhttps://patchthecve.com/cve/CVE-2025-11596.htmlThu, 08 Oct 2026 13:10:00 +0000HIGH 7.3: A vulnerability was determined in code-projects E-Commerce Website 1.0. The affected element is an unknown function of the file /pages/delete_order_details.php. Executing manipulation of the argument order_id can lead to sql injection. The attack can be executed remotely. The exploit has been publichttps://patchthecve.com/cve/CVE-2025-11558.htmlhttps://patchthecve.com/cve/CVE-2025-11558.htmlThu, 08 Oct 2026 13:10:00 +0000HIGH 7.3: A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/user_index_search.php. Performing manipulation of the argument Search results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public anhttps://patchthecve.com/cve/CVE-2025-11513.htmlhttps://patchthecve.com/cve/CVE-2025-11513.htmlThu, 08 Oct 2026 13:10:00 +0000HIGH 7.3: A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/supplier_update.php. This manipulation of the argument supp_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and https://patchthecve.com/cve/CVE-2025-11511.htmlhttps://patchthecve.com/cve/CVE-2025-11511.htmlThu, 08 Oct 2026 13:10:00 +0000MEDIUM 6.3: A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplier_add.php. Executing manipulation of the argument supp_email can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.https://patchthecve.com/cve/CVE-2025-11509.htmlhttps://patchthecve.com/cve/CVE-2025-11509.htmlThu, 08 Oct 2026 13:10:00 +0000MEDIUM 6.3: A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/product_add.php. Performing manipulation of the argument prod_name results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.https://patchthecve.com/cve/CVE-2025-11420.htmlhttps://patchthecve.com/cve/CVE-2025-11420.htmlThu, 08 Oct 2026 13:10:00 +0000HIGH 7.3: A vulnerability was detected in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/edit_order_details.php. The manipulation of the argument order_id results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.https://patchthecve.com/cve/CVE-2025-11037.htmlhttps://patchthecve.com/cve/CVE-2025-11037.htmlFri, 09 Oct 2026 10:10:00 +0000HIGH 7.3: A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/admin_index_search.php. Performing manipulation of the argument Search results in sql injection. The attack may be initiated remotely. The exploit has been released to thehttps://patchthecve.com/cve/CVE-2025-11036.htmlhttps://patchthecve.com/cve/CVE-2025-11036.htmlFri, 09 Oct 2026 10:10:00 +0000HIGH 7.3: A vulnerability was identified in code-projects E-Commerce Website 1.0. This affects an unknown function of the file /pages/admin_account_update.php. Such manipulation of the argument user_id leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be https://patchthecve.com/cve/CVE-2025-10793.htmlhttps://patchthecve.com/cve/CVE-2025-10793.htmlWed, 17 Jun 2026 08:29:00 +0000HIGH 7.3: A vulnerability was detected in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/admin_account_delete.php. Performing manipulation of the argument user_id results in sql injection. It is possible to initiate the attack remotely. The https://patchthecve.com/cve/CVE-2024-8217.htmlhttps://patchthecve.com/cve/CVE-2024-8217.htmlWed, 17 Jun 2026 08:22:08 +0000HIGH 7.3: A vulnerability has been found in SourceCodester E-Commerce Website 1.0 and classified as critical. This vulnerability affects unknown code of the file /Admin/registration.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2024-8139.htmlhttps://patchthecve.com/cve/CVE-2024-8139.htmlWed, 17 Jun 2026 08:21:58 +0000MEDIUM 6.3: A vulnerability has been found in itsourcecode E-Commerce Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file search_list.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The exploit hashttps://patchthecve.com/cve/CVE-2023-7108.htmlhttps://patchthecve.com/cve/CVE-2023-7108.htmlWed, 17 Jun 2026 06:52:05 +0000MEDIUM 4.3: A vulnerability classified as problematic has been found in code-projects E-Commerce Website 1.0. This affects an unknown part of the file user_signup.php. The manipulation of the argument firstname with the input <video/src=x onerror=alert(document.domain)> leads to cross site scripting. It is posshttps://patchthecve.com/cve/CVE-2023-7107.htmlhttps://patchthecve.com/cve/CVE-2023-7107.htmlWed, 17 Jun 2026 06:52:05 +0000HIGH 7.3: A vulnerability was found in code-projects E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file user_signup.php. The manipulation of the argument firstname/middlename/email/address/contact/username leads to sql injection. The attack https://patchthecve.com/cve/CVE-2023-7106.htmlhttps://patchthecve.com/cve/CVE-2023-7106.htmlWed, 17 Jun 2026 06:52:04 +0000MEDIUM 6.3: A vulnerability was found in code-projects E-Commerce Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file product_details.php?prod_id=11. The manipulation of the argument prod_id leads to sql injection. The attack can be launched remohttps://patchthecve.com/cve/CVE-2023-7105.htmlhttps://patchthecve.com/cve/CVE-2023-7105.htmlWed, 17 Jun 2026 06:52:04 +0000MEDIUM 4.7: A vulnerability was found in code-projects E-Commerce Website 1.0. It has been classified as critical. Affected is an unknown function of the file index_search.php. The manipulation of the argument search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disc