Code-Projects Simple Admin Panel vulnerabilities

14 CVEs affecting Code-Projects Simple Admin Panel, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-12938, published 2024-12-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-25223, published 2024-02-14. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.php.
CVE-2024-12936, published 2024-12-26. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in code-projects Simple Admin Panel 1.0. This issue affects some unknown processing of the file catDeleteController.php. The…
CVE-2024-12935, published 2024-12-26. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in code-projects Simple Admin Panel 1.0. This vulnerability affects unknown code of the file editItemForm.php. The manipulation of the argument record…
CVE-2024-12937, published 2024-12-26. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. Affected is an unknown function of the file addVariationController.php. The manipulation of the…
CVE-2024-12931, published 2024-12-26. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been classified as critical. Affected is an unknown function of the file /addCatController.php. The manipulation of the…
CVE-2024-12938, published 2024-12-26. Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been found in code-projects Simple Admin Panel 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file updateOrderStatus.php. The…
CVE-2024-12934, published 2024-12-26. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in code-projects Simple Admin Panel 1.0. This affects an unknown part of the file updateItemController.php. The manipulation of the argument…
CVE-2024-12928, published 2024-12-26. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. This affects an unknown part. The manipulation of the argument c_name leads to sql injection. It…
CVE-2024-25225, published 2024-02-14. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter…
CVE-2024-12933, published 2024-12-26. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file updateItemController.php. The…

Latest

CVE-2024-12932, published 2024-12-26. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file addSizeController.php.…
CVE-2024-12930, published 2024-12-26. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in code-projects Simple Admin Panel 1.0 and classified as problematic. This issue affects some unknown processing of the file addCatController.php. The manipulation of the…