Sourcecodester Online Shop Project vulnerabilities

2 vulnerabilities

Known vulnerabilities in Sourcecodester Online Shop Project, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2025-13451oretnom23online_shop_project+1
EPSS score
0.40%
A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.5.4CVE-2025-13450oretnom23online_shop_project+1
EPSS score
0.24%
A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument f_name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.