E-Commerce Website vulnerabilities

There is an SQL injection vulnerability in Akilli Commerce software that allows for a Blind SQL Injection attack. This issue affects E-Commerce Website versions before 4.5.001.

A vulnerability was discovered in code-projects E-Commerce Website 1.0 involving SQL injection in the file /pages/product_add_qty.php. Manipulation of the prod_id argument allows remote attack execution. The exploit is publicly available and may be used.

A SQL injection vulnerability was found in code-projects E-Commerce Website 1.0 in the file /pages/supplier_add.php. Manipulating the supp_email argument allows remote attack. The exploit has been publicly disclosed and may be used.

A SQL injection vulnerability was found in code-projects E-Commerce Website 1.0 in the file /pages/product_add.php. Manipulating the prod_name argument allows remote attack. The exploit has been publicly disclosed and may be used.