Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2853▼ 343 respecto a la semana anterior
Críticas / altas1376▼ 50 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior
94 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.3) | 0.52% | — | Phpgurukul Online Shopping Portal | 3/3/2025 | 17/6/2026 | A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /product-details.php. The manipulation of the argument quality/price/value/name/summary/review leads to sql injection. The attack can be launched… | |
| Modificada | Media (5.3) | 0.42% | — | Phpgurukul Online Shopping Portal | 23/2/2025 | 17/6/2026 | A vulnerability, which was classified as critical, was found in PHPGurukul/Campcodes Online Shopping Portal 2.1. This affects an unknown part of the file /search-result.php. The manipulation of the argument Product leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed… | |
| Analizada | Alta (8.8) | 0.76% | — | Phpgurukul Online Shopping Portal Project | 14/2/2025 | 17/6/2026 | A SQL Injection vulnerability was found in /shopping/track-orders.php in PHPGurukul Online Shopping Portal v2.1, which allows remote attackers to execute arbitrary code via orderid POST request parameter. | |
| Aplazada | Baja (3.5) | 0.60% | — | Mavenir SCE Application Provisioning PortalAI | 12/2/2025 | 17/6/2026 | A directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an administrative user to access system files with the file permissions of the privileged system user running the application. | |
| Aplazada | Alta (8.8) | 0.39% | — | Mavenir SCE Application Provisioning PortalAI | 12/2/2025 | 17/6/2026 | An authorization bypass vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_24_0, which allows an authenticated 'guest' user to perform unauthorized administrative actions, such as accessing the 'add user' feature, by bypassing client-side access controls. | |
| Modificada | Alta (8.8) | 0.70% | — | Fabian Shopping Portal | 6/2/2025 | 17/6/2026 | In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability. | |
| Analizada | Media (5.3) | 0.39% | — | Phpgurukul Online Shopping Portal | 4/11/2024 | 17/6/2026 | A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/two_tables.php. The manipulation of the argument scripts leads to cross site scripting. The attack can be… | |
| Analizada | Media (5.3) | 0.43% | — | Phpgurukul Online Shopping Portal | 4/11/2024 | 17/6/2026 | A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Shopping Portal 2.0. Affected by this issue is some unknown functionality of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/js_data.php. The manipulation of the argument scripts leads to cross site… | |
| Analizada | Media (5.3) | 0.40% | — | Phpgurukul Online Shopping Portal | 4/11/2024 | 17/6/2026 | A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/html_table.php. The manipulation of the argument scripts leads to cross site scripting. The… | |
| Analizada | Media (5.3) | 0.40% | — | Phpgurukul Online Shopping Portal | 4/11/2024 | 17/6/2026 | A vulnerability classified as problematic has been found in PHPGurukul Online Shopping Portal 2.0. Affected is an unknown function of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/empty_table.php. The manipulation of the argument scripts leads to cross site scripting. It is possible to launch… | |
| Analizada | Media (5.3) | 0.40% | — | Phpgurukul Online Shopping Portal | 4/11/2024 | 17/6/2026 | A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/dymanic_table.php. The manipulation of the argument scripts leads to cross site scripting. The… | |
| Analizada | Media (5.3) | 0.39% | — | Phpgurukul Online Shopping Portal | 4/11/2024 | 17/6/2026 | A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been declared as problematic. This vulnerability affects unknown code of the file admin/assets/plugins/DataTables/media/unit_testing/templates/dom_data_two_headers.php. The manipulation of the argument scripts leads to cross site scripting. The… | |
| Analizada | Media (5.3) | 0.38% | — | Phpgurukul Online Shopping Portal | 4/11/2024 | 17/6/2026 | A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/dom_data_th.php. The manipulation of the argument scripts leads to cross site scripting. The attack can be… | |
| Analizada | Media (5.3) | 0.38% | — | Phpgurukul Online Shopping Portal | 4/11/2024 | 17/6/2026 | A vulnerability classified as problematic has been found in PHPGurukul Online Shopping Portal 2.0. This affects an unknown part of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/dom_data.php. The manipulation of the argument scripts leads to cross site scripting. It is possible to initiate the… | |
| Analizada | Media (5.3) | 0.38% | — | Phpgurukul Online Shopping Portal | 3/11/2024 | 17/6/2026 | A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/deferred_table.php. The manipulation of the argument scripts leads to cross site… | |
| Analizada | Media (5.3) | 0.38% | — | Phpgurukul Online Shopping Portal | 3/11/2024 | 17/6/2026 | A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/complex_header_2.php. The manipulation of the argument scripts leads to cross… | |
| Analizada | Media (5.3) | 0.38% | — | Phpgurukul Online Shopping Portal | 3/11/2024 | 17/6/2026 | A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been classified as problematic. Affected is an unknown function of the file /shopping/admin/assets/plugins/DataTables/examples/examples_support/editable_ajax.php. The manipulation of the argument value leads to cross site scripting. It is… | |
| Analizada | Media (5.3) | 0.66% | — | Codezips Online Shopping Portal | 10/10/2024 | 17/6/2026 | A vulnerability, which was classified as critical, has been found in Codezips Online Shopping Portal 1.0. This issue affects some unknown processing of the file /update-image1.php. The manipulation of the argument productimage1 leads to unrestricted upload. The attack may be initiated remotely. The exploit has been… | |
| Analizada | Media (6.9) | 0.69% | — | Codezips Online Shopping Portal | 3/10/2024 | 17/6/2026 | A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and… | |
| Analizada | Media (6.9) | 1.4% | 💥 PoC | Phpgurukul Online Shopping Portal | 29/9/2024 | 17/6/2026 | A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /shopping/admin/index.php of the component Admin Panel. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has… | |
| Analizada | Media (5.3) | 0.73% | — | Codezips Online Shopping Portal | 20/9/2024 | 17/6/2026 | A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attack can be launched… | |
| Analizada | Media (6.1) | 0.52% | 💥 PoC | Phpgurukul Online Shopping Portal | 18/7/2024 | 17/6/2026 | The PHPGurukul Online Shopping Portal Project version 2.0 contains a vulnerability that allows Cross-Site Request Forgery (CSRF) to lead to Stored Cross-Site Scripting (XSS). An attacker can exploit this vulnerability to execute arbitrary JavaScript code in the context of a user's session, potentially leading to… | |
| Analizada | Media (5.4) | 0.54% | — | Phpgurukul Emergency Ambulance Hiring Portal | 30/3/2024 | 17/6/2026 | A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/search.php of the component Search Request Page. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The… | |
| Analizada | Media (4.8) | 0.59% | — | Phpgurukul Emergency Ambulance Hiring Portal | 30/3/2024 | 17/6/2026 | A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/add-ambulance.php of the component Add Ambulance Page. The manipulation of the argument Ambulance Reg No/Driver Name leads to cross site scripting.… | |
| Analizada | Media (4.3) | 0.40% | — | Phpgurukul Emergency Ambulance Hiring Portal | 30/3/2024 | 17/6/2026 | A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/manage-ambulance.php of the component Manage Ambulance Page. The manipulation of the argument del leads to cross-site request forgery. The attack… |