CVE-2023-7105: medium-severity vulnerability in code-projects E-Commerce Website
code-projects E-Commerce Website index_search.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.7epss 0.9%
A vulnerability was found in code-projects E-Commerce Website 1.0. It has been classified as critical. Affected is an unknown function of the file index_search.php. The manipulation of the argument search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249000.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected products
code-projects · E-Commerce WebsiteRelated CVEs — code-projects E-Commerce Website
In the same product, most dangerous first.
CVE-2023-7107HIGHcode-projects E-Commerce Website user_signup.php sql injectionEPSS 0.9%CVE-2023-7108MEDIUMcode-projects E-Commerce Website user_signup.php cross site scriptingEPSS 0.8%CVE-2023-7106MEDIUMcode-projects E-Commerce Website sql injectionEPSS 0.8%CVE-2025-10793MEDIUMcode-projects E-Commerce Website admin_account_delete.php sql injectionEPSS 0.6%CVE-2025-11036MEDIUMcode-projects E-Commerce Website admin_account_update.php sql injectionEPSS 0.5%CVE-2025-11037MEDIUMcode-projects E-Commerce Website admin_index_search.php sql injectionEPSS 0.5%