CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2025-1903 – Codezips Online Shopping Website cart_add.php sql injection
https://notcve.org/view.php?id=CVE-2025-1903
04 Mar 2025 — A vulnerability was found in Codezips Online Shopping Website 1.0. It has been rated as critical. This issue affects some unknown processing of the file /cart_add.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. • https://github.com/takakie/CVE/blob/main/cve_3.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2025-1858 – Codezips Online Shopping Website success.php sql injection
https://notcve.org/view.php?id=CVE-2025-1858
03 Mar 2025 — A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unknown code of the file /success.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/Centurion-cyber/CVE/blob/main/CVE_1.md • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •