Jonnys Liquor
Monthly
A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Remote SQL injection in Jonnys Liquor 1.0 allows unauthenticated attackers to manipulate the drink parameter of the admin-area.php endpoint, potentially extracting or modifying database contents. Public exploit code is available, but EPSS indicates a low probability of exploitation (0.05%).
SQL injection in code-projects Jonnys Liquor 1.0 allows remote attackers to manipulate database content via the ID parameter in /admin/delete-row.php. The exploit is publicly available and requires no authentication, enabling malicious database actions. No active exploitation has been confirmed, and EPSS indicates very low exploitation probability.
SQL injection in Jonnys Liquor 1.0 allows unauthenticated remote attackers to manipulate database queries via the Search parameter of /browse.php. Exploit code is publicly available; however, the impact is assessed as low (only partial data exposure or modification). No evidence of active exploitation has been identified.
A Reflected cross-site scripting (XSS) vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Remote SQL injection in Jonnys Liquor 1.0 allows unauthenticated attackers to manipulate the drink parameter of the admin-area.php endpoint, potentially extracting or modifying database contents. Public exploit code is available, but EPSS indicates a low probability of exploitation (0.05%).
SQL injection in code-projects Jonnys Liquor 1.0 allows remote attackers to manipulate database content via the ID parameter in /admin/delete-row.php. The exploit is publicly available and requires no authentication, enabling malicious database actions. No active exploitation has been confirmed, and EPSS indicates very low exploitation probability.
SQL injection in Jonnys Liquor 1.0 allows unauthenticated remote attackers to manipulate database queries via the Search parameter of /browse.php. Exploit code is publicly available; however, the impact is assessed as low (only partial data exposure or modification). No evidence of active exploitation has been identified.
A Reflected cross-site scripting (XSS) vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.