Vulnerabilities

TI-2023-23628 CVE-2023-44061 · GHSA-5gcf-cj7j-f69f

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote…

HIGH 73

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload function in the edit profile component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01564 Published 2023-10-06 No fix listed CWE-434

TI-2023-01416 CVE-2023-1497 · GHSA-8px5-5hr4-658v

SourceCodester Simple and Nice Shopping Cart Script uploaderm.php unrestricted upload

MEDIUM 43

A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0072 Published 2023-03-19 No fix listed CWE-434

TI-2022-02732 CVE-2022-2957 · GHSA-rq2q-g74h-7frw

SourceCodester Simple and Nice Shopping Cart Script profile.php sql injection

HIGH 75

A vulnerability classified as critical was found in SourceCodester Simple and Nice Shopping Cart Script.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00867 Published 2022-08-25 No fix listed CWE-89

TI-2022-02697 CVE-2022-2909 · GHSA-5wj6-fpjf-5rfv

SourceCodester Simple and Nice Shopping Cart Script profile.php unrestricted upload

HIGH 71

A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00878 Published 2022-08-20 No fix listed CWE-434

TI-2022-02608 CVE-2022-2814 · GHSA-jj55-r28f-x5pv

SourceCodester Simple and Nice Shopping Cart Script login.php cross site scripting

MEDIUM 60

A vulnerability has been found in SourceCodester Simple and Nice Shopping Cart Script and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00628 Published 2022-08-15 No fix listed CWE-79