GCVE - cpe:2.3:a:sourcecodester:shopping_website:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:shopping_website:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Sourcecodester (`f6c988b2-f9bb-51b9-8f02-f23eef2a7551`)
Product	Shopping Website (`66f611e4-8f76-5846-b5a7-9a67339e2511`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-3534`	vulnerable	2026-06-08 06:09:39.805889	SourceCodester Shopping Website check_availability.php sql injection MEDIUM (6.3) A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file check_availability.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-233286 is the identifier assigned to this vulnerability. Published: 2023-07-07T12:00:04.953Z Updated: 2024-08-02T06:55:03.700Z Open on db.gcve.eu Reference links https://vuldb.com/?id.233286 https://vuldb.com/?ctiid.233286 https://github.com/DUA0G/cve/blob/main/1.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-3503`	vulnerable	2026-06-08 06:09:39.738120	SourceCodester Shopping Website insert-product.php unrestricted upload MEDIUM (6.3) A vulnerability has been found in SourceCodester Shopping Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232951. Published: 2023-07-04T14:31:03.508Z Updated: 2024-10-31T19:46:51.594Z Open on db.gcve.eu Reference links https://vuldb.com/?id.232951 https://vuldb.com/?ctiid.232951 https://github.com/Turbo51/CveHubList/blob/main/Shopping%20Website%20(E-Commerce)%20%20insert-product.php%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-3502`	vulnerable	2026-06-08 06:09:39.736023	SourceCodester Shopping Website search-result.php sql injection MEDIUM (6.3) A vulnerability, which was classified as critical, was found in SourceCodester Shopping Website 1.0. Affected is an unknown function of the file search-result.php. The manipulation of the argument product leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-232950 is the identifier assigned to this vulnerability. Published: 2023-07-04T14:00:04.782Z Updated: 2024-08-02T06:55:03.587Z Open on db.gcve.eu Reference links https://vuldb.com/?id.232950 https://vuldb.com/?ctiid.232950 https://github.com/MoeMion233/VulHub/blob/main/Shopping%20Website%20(E-Commerce)%20search-result.php%20has%20Sqlinjection.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-3458`	vulnerable	2026-06-08 06:09:39.622112	SourceCodester Shopping Website forgot-password.php sql injection MEDIUM (6.3) A vulnerability was found in SourceCodester Shopping Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file forgot-password.php. The manipulation of the argument contact leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232675. Published: 2023-06-29T13:31:04.889Z Updated: 2024-08-02T06:55:03.351Z Open on db.gcve.eu Reference links https://vuldb.com/?id.232675 https://vuldb.com/?ctiid.232675 https://github.com/AD-Appledog/CveHubList/blob/main/Shopping%20Website%20(E-Commerce)%20forgot-password.php%20has%20Sqlinjection.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-3457`	vulnerable	2026-06-08 06:09:39.620972	SourceCodester Shopping Website index.php sql injection MEDIUM (6.3) A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-232674 is the identifier assigned to this vulnerability. Published: 2023-06-29T13:31:03.915Z Updated: 2024-08-02T06:55:03.495Z Open on db.gcve.eu Reference links https://vuldb.com/?id.232674 https://vuldb.com/?ctiid.232674 https://github.com/qwegz/CveList/blob/main/Shopping%20Website%20(E-Commerce)%20%20index.php%20has%20Sqlinjection.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.