GCVE - cpe:2.3:a:fabian:e-commerce_site:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fabian:e-commerce_site:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Fabian (`fbf7922e-b691-5c28-8717-83ed5e15ae54`)
Product	E Commerce Site (`d177b5d4-808e-564c-8b1a-938b133ee990`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-7756`	vulnerable	2026-06-08 07:45:18.168016	code-projects E-Commerce Site cross-site request forgery MEDIUM (4.3) A vulnerability classified as problematic has been found in code-projects E-Commerce Site 1.0. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-07-17T20:44:05.924Z Updated: 2025-07-18T14:19:46.249Z Open on db.gcve.eu Reference links https://vuldb.com/?id.316746 https://vuldb.com/?ctiid.316746 https://vuldb.com/?submit.615620 https://github.com/BalanceLee/CVE/issues/3 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7175`	vulnerable	2026-06-08 07:43:18.092109	code-projects E-Commerce Site users_photo.php unrestricted upload MEDIUM (6.3) A vulnerability was found in code-projects E-Commerce Site 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/users_photo.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-07-08T11:02:06.108Z Updated: 2025-07-08T20:29:19.384Z Open on db.gcve.eu Reference links https://vuldb.com/?id.315114 https://vuldb.com/?ctiid.315114 https://vuldb.com/?submit.606710 https://github.com/kn1g78/cve/blob/main/ecom.md https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11094`	vulnerable	2026-06-08 07:02:28.053276	code-projects E-Commerce Website admin_product_details.php sql injection HIGH (7.3) A security vulnerability has been detected in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/admin_product_details.php. Such manipulation of the argument prod_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Published: 2025-09-28T03:32:06.529Z Updated: 2025-09-29T19:38:07.136Z Open on db.gcve.eu Reference links https://vuldb.com/?id.326175 https://vuldb.com/?ctiid.326175 https://vuldb.com/?submit.659820 https://github.com/wolfsecurity2/CVE/tree/main/tmp34 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-7124`	vulnerable	2026-06-08 06:21:57.088820	code-projects E-Commerce Site search.php cross site scripting MEDIUM (4.3) A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input <video/src=x onerror=alert(document.cookie)> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249096. Published: 2023-12-28T02:31:04.389Z Updated: 2024-08-02T08:50:08.284Z Open on db.gcve.eu Reference links https://vuldb.com/?id.249096 https://vuldb.com/?ctiid.249096 https://github.com/h4md153v63n/CVEs/blob/main/E-commerce_Site/E-commerce_Site-Reflected_Cross_Site_Scripting.md	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.