https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-4173.htmlhttps://patchthecve.com/cve/CVE-2025-4173.htmlWed, 17 Jun 2026 09:32:41 +0000MEDIUM 6.3: A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is the function delete_cart of the file /oews/classes/Master.php?f=delete_cart. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. https://patchthecve.com/cve/CVE-2025-3817.htmlhttps://patchthecve.com/cve/CVE-2025-3817.htmlWed, 17 Jun 2026 09:20:43 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /oews/classes/Master.php?f=delete_stock. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotelhttps://patchthecve.com/cve/CVE-2025-3692.htmlhttps://patchthecve.com/cve/CVE-2025-3692.htmlWed, 17 Jun 2026 09:20:29 +0000LOW 2.4: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=save_product. The manipulation leads to cross site scripting. The attack can be launched remotelhttps://patchthecve.com/cve/CVE-2025-3018.htmlhttps://patchthecve.com/cve/CVE-2025-3018.htmlWed, 17 Jun 2026 09:19:01 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /classes/Users.php?f=delete. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has bhttps://patchthecve.com/cve/CVE-2025-2846.htmlhttps://patchthecve.com/cve/CVE-2025-2846.htmlWed, 17 Jun 2026 09:07:43 +0000HIGH 7.3: A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects the function registration of the file /oews/classes/Users.php?f=registration of the component Registration. The manipulation of the argument ID leads to sql injection. The attack cahttps://patchthecve.com/cve/CVE-2025-2651.htmlhttps://patchthecve.com/cve/CVE-2025-2651.htmlWed, 17 Jun 2026 09:07:22 +0000MEDIUM 5.3: A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /oews/admin/. The manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely. The exploit https://patchthecve.com/cve/CVE-2025-0173.htmlhttps://patchthecve.com/cve/CVE-2025-0173.htmlWed, 17 Jun 2026 08:26:00 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /orders/view_order.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has behttps://patchthecve.com/cve/CVE-2024-11247.htmlhttps://patchthecve.com/cve/CVE-2024-11247.htmlWed, 17 Jun 2026 06:57:23 +0000LOW 3.5: A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=save_product of the component Inventory Page. The manipulation of the argument brand leads to croshttps://patchthecve.com/cve/CVE-2024-9974.htmlhttps://patchthecve.com/cve/CVE-2024-9974.htmlWed, 17 Jun 2026 08:25:37 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php?f=add_to_card of the component POST Request Handler. The manipulation of the argument product_id leads to shttps://patchthecve.com/cve/CVE-2024-9973.htmlhttps://patchthecve.com/cve/CVE-2024-9973.htmlWed, 17 Jun 2026 08:25:37 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=reports of the component Report Viewing Page. The manipulation of the argument date leads to sql injection. It is possible to launch the ahttps://patchthecve.com/cve/CVE-2024-9952.htmlhttps://patchthecve.com/cve/CVE-2024-9952.htmlWed, 17 Jun 2026 08:25:34 +0000LOW 2.4: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=system_info/contact_info of the component Contact Information Page. The manipulation of the argument Address leads to cross site scrihttps://patchthecve.com/cve/CVE-2024-9906.htmlhttps://patchthecve.com/cve/CVE-2024-9906.htmlWed, 17 Jun 2026 08:25:28 +0000LOW 3.5: A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /admin/?page=inventory/view_inventory&id=2. The manipulation of the argument Code leads to cross site scripting. It is possible to launch the attack https://patchthecve.com/cve/CVE-2024-9905.htmlhttps://patchthecve.com/cve/CVE-2024-9905.htmlWed, 17 Jun 2026 08:25:28 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /admin/?page=inventory/view_inventory&id=2. The manipulation of the argument id leads to sql injection. The attack may be initiated remohttps://patchthecve.com/cve/CVE-2024-9809.htmlhttps://patchthecve.com/cve/CVE-2024-9809.htmlWed, 17 Jun 2026 08:25:18 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is the function delete_product of the file /classes/Master.php?f=delete_product. The manipulation of the argument id leads to sql injection. The attack can be launchehttps://patchthecve.com/cve/CVE-2024-9808.htmlhttps://patchthecve.com/cve/CVE-2024-9808.htmlWed, 17 Jun 2026 08:25:17 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=products/view_product. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The explohttps://patchthecve.com/cve/CVE-2024-9317.htmlhttps://patchthecve.com/cve/CVE-2024-9317.htmlWed, 17 Jun 2026 08:24:20 +0000MEDIUM 6.3: A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is the function delete_category of the file /classes/Master.php?f=delete_category. The manipulation of the argument id leads to sql injection. The attack can be launched remotelhttps://patchthecve.com/cve/CVE-2024-9082.htmlhttps://patchthecve.com/cve/CVE-2024-9082.htmlWed, 17 Jun 2026 08:23:55 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save of the component User Creation Handler. The manipulation of the argument Type with the input 1 leads to improhttps://patchthecve.com/cve/CVE-2024-9081.htmlhttps://patchthecve.com/cve/CVE-2024-9081.htmlWed, 17 Jun 2026 08:23:54 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file view_category.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploihttps://patchthecve.com/cve/CVE-2024-8949.htmlhttps://patchthecve.com/cve/CVE-2024-8949.htmlWed, 17 Jun 2026 08:23:36 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cart_id/id leads to improper ownership management. It is possible to ihttps://patchthecve.com/cve/CVE-2024-5894.htmlhttps://patchthecve.com/cve/CVE-2024-5894.htmlWed, 17 Jun 2026 08:16:51 +0000HIGH 7.3: A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file manage_product.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the