Approved changes feed: RSS · Atom

cpe:2.3:a:s-a-zhd:ecommerce-website-using-php:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorS A Zhd (ff2f20dd-5964-5535-a0db-1a606acc2edf)
ProductEcommerce Website Using Php (d72baf69-70c3-5b2a-90f3-18faeb8e857a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/s-a-zhd/ecommerce-website-using-php purl2cpe 2026-06-01 10:16:02.666134

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2041 vulnerable 2026-06-08 07:14:57.809931 s-a-zhd Ecommerce-Website-using-PHP shop.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in s-a-zhd Ecommerce-Website-using-PHP 1.0. Affected by this issue is some unknown functionality of the file /shop.php. The manipulation of the argument p_cat leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-06T20:31:04.388Z
Updated: 2025-03-06T20:45:17.129Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2036 vulnerable 2026-06-08 07:14:57.804536 s-a-zhd Ecommerce-Website-using-PHP details.php sql injection
MEDIUM (6.3)
A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0. It has been classified as critical. This affects an unknown part of the file details.php. The manipulation of the argument pro_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-06T18:31:04.750Z
Updated: 2025-03-06T20:41:52.062Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2035 vulnerable 2026-06-08 07:14:57.803019 s-a-zhd Ecommerce-Website-using-PHP customer_register.php unrestricted upload
MEDIUM (6.3)
A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /customer_register.php. The manipulation of the argument name leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-06T18:00:07.143Z
Updated: 2025-03-06T18:24:08.799Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.