Ashop Shopping Cart Software

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ashopsoftware:ashop_shopping_cart_software:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAshopsoftware (b9f132f9-d2d8-5bc9-86dc-57ca0fe19a82)
ProductAshop Shopping Cart Software (c18625df-193e-5475-987b-1e4e5ab20a57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25507 vulnerable 2026-06-08 05:13:42.459030 Ashop Shopping Cart Software Lastest SQL Injection via index.php
HIGH (8.2)
Ashop Shopping Cart Software contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'shop' parameter. Attackers can send GET requests to index.php with malicious 'shop' values using UNION-based SQL injection to extract sensitive database information.
Published: 2026-03-04T17:15:53.177Z
Updated: 2026-04-07T14:04:53.970Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-25391 vulnerable 2026-06-08 05:13:42.320258 Ashop Shopping Cart Software Lastest Latest SQL Injection via bannedcustomers.php
HIGH (8.2)
Ashop Shopping Cart Software contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through the blacklistitemid parameter. Attackers can send POST requests to the admin/bannedcustomers.php endpoint with crafted SQL payloads using SLEEP functions to extract sensitive database information.
Published: 2026-02-22T13:43:50.775Z
Updated: 2026-04-07T14:03:56.576Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.