Approved changes feed: RSS · Atom

cpe:2.3:a:ecommerce-codeigniter-bootstrap_project:ecommerce-codeigniter-bootstrap:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEcommerce Codeigniter Bootstrap Project (3a990955-4d6f-5e35-bd65-aa0c012e72d4)
ProductEcommerce Codeigniter Bootstrap (728b32dd-fd08-5cd2-b667-49f1125362c9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/kirilkirkov/ecommerce-codeigniter-bootstrap purl2cpe 2026-06-01 10:14:47.538270

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6526 vulnerable 2026-06-08 06:58:19.692569 CodeIgniter Ecommerce-CodeIgniter-Bootstrap cross site scripting
LOW (3.5)
A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument search_title/catName/sub/name/categorie leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 1b3da45308bb6c3f55247d0e99620b600bd85277. It is recommended to apply a patch to fix this issue. The identifier VDB-270369 was assigned to this vulnerability.
Published: 2024-07-05T13:31:04.482Z
Updated: 2024-08-01T21:41:03.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31822 vulnerable 2026-06-08 06:35:32.135945 Details available
An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the saveLanguageFiles method of the Languages.php component.
Published: 2024-04-29T00:00:00.000Z
Updated: 2024-08-02T01:59:50.150Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31821 vulnerable 2026-06-08 06:35:32.135212 Details available
SQL Injection vulnerability in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the manageQuantitiesAndProcurement method of the Orders_model.php component.
Published: 2024-04-29T00:00:00.000Z
Updated: 2024-08-02T01:59:49.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31820 vulnerable 2026-06-08 06:35:32.133776 Details available
An issue in Ecommerce-CodeIgniter-Bootstrap commit v. d22b54e8915f167a135046ceb857caaf8479c4da allows a remote attacker to execute arbitrary code via the getLangFolderForEdit method of the Languages.php component.
Published: 2024-04-29T00:00:00.000Z
Updated: 2024-08-02T01:59:50.598Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23010 vulnerable 2026-06-08 05:54:27.717427 Details available
Cross Site Scripting (XSS) vulnerability in Ecommerce-CodeIgniter-Bootstrap thru commit d5904379ca55014c5df34c67deda982c73dc7fe5 (on Dec 27, 2022), allows attackers to execute arbitrary code via the languages and trans_load parameters in file add_product.php.
Published: 2023-01-20T00:00:00.000Z
Updated: 2025-04-03T15:05:05.639Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35213 vulnerable 2026-06-08 05:46:04.271778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25093 vulnerable 2026-06-08 05:22:35.988330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25092 vulnerable 2026-06-08 05:22:35.983430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25091 vulnerable 2026-06-08 05:22:35.983170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25090 vulnerable 2026-06-08 05:22:35.982898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25089 vulnerable 2026-06-08 05:22:35.982642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25088 vulnerable 2026-06-08 05:22:35.982287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25087 vulnerable 2026-06-08 05:22:35.981891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25086 vulnerable 2026-06-08 05:22:35.981287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.