Skip to main content

Threat Intelligence Database

Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Package: pkg:github/code-projects/Online-Shoe-Store

Threat Intelligence

Click on any threat for detailed analysis and mitigation recommendations

CVE-2026-5836 is a medium severity cross-site scripting (XSS) vulnerability in version 1.0 of code-projects Online Shoe Store. The issue exists in the /admin/admin_product.php file where the product_name parameter can be manipulated to execute XSS attacks. The vulnerability can be exploited remotely and requires user interaction with high privileges. No official patch or remediation guidance is currently available from the vendor. The exploit has been publicly disclosed but no known active exploitation in the wild has been reported.

Join the discussion

CVE-2026-5835 is a medium severity cross-site scripting (XSS) vulnerability in code-projects Online Shoe Store version 1.0. The flaw exists in an unspecified functionality of the /admin/admin_football.php file, where manipulation of the product_name argument can lead to XSS. The vulnerability can be exploited remotely and requires high privileges with user interaction. No official patch or remediation guidance is currently available.

Join the discussion

CVE-2026-5834 is a cross-site scripting (XSS) vulnerability in code-projects Online Shoe Store version 1.0. The issue exists in an unknown function within the /admin/admin_running.php file, where manipulation of the product_name argument allows remote attackers to execute XSS attacks. The vulnerability has a medium severity rating with a CVSS score of 4.8. There is no official patch or remediation information available at this time, and no known exploits are reported in the wild.

Join the discussion

CVE-2026-5647 is a cross-site scripting (XSS) vulnerability in version 1.0 of code-projects Online Shoe Store. It affects the Add Product Page component, specifically the /admin/admin_feature.php file, where the product_name argument can be manipulated to execute XSS attacks. The vulnerability can be exploited remotely and requires user interaction with high privileges. No official patch or remediation guidance is currently available. The vulnerability has a medium severity rating with a CVSS score of 4.8.

Join the discussion

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /function/customer_signup.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Join the discussion

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been classified as critical. This affects an unknown part of the file /admin/admin_feature.php. The manipulation of the argument product_code leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Join the discussion

A vulnerability was found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /cart.php. The manipulation of the argument qty[] leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Join the discussion

Showing 1 to 7 of 7 results

Filters:Package: pkg:github/code-projects/Online-Shoe-Store
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses