CVE-2026-82701mediumCWE-74CWE-89

CVE-2026-82701: fallo de gravedad media en code-projects Online Shopping System

code-projects Online Shopping System Search Functionality action.php sql injection

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Online Shopping System

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

33Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendcvss 6.9epss 0.4%
A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
code-projects · Online Shopping System
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — code-projects Online Shopping System

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-82700MEDIUMcode-projects Online Shopping System Newsletter Subscription offersmail.php cross site scriptingEPSS 0.5%CVE-2026-79793MEDIUMcode-projects Online Shopping System sumit_form.php cross site scriptingEPSS 0.5%CVE-2026-19998MEDIUMcode-projects Online Shopping System offersmail.php cross site scriptingEPSS 0.5%CVE-2026-19919MEDIUMcode-projects Online Shopping System Login login.php sql injectionEPSS 0.4%CVE-2026-85643MEDIUMcode-projects Online Shopping System adduser.php mysqli_query sql injectionEPSS 0.3%CVE-2026-19922MEDIUMcode-projects Online Shopping System checkout.php cross site scriptingEPSS 0.3%