GCVE - cpe:2.3:a:superstorefinder:super_store

Approved changes feed: RSS · Atom

cpe:2.3:a:superstorefinder:super_store_finder:3.6:*:*:*:*:*:*:*

part: a version: 3.6 update: *

Vendor	Superstorefinder (`caf0395d-9e6a-5c24-896a-d27d07bd976f`)
Product	Super Store Finder (`b2b112aa-21d5-5755-bd29-25428b62b5e6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-41507`	vulnerable	2026-06-08 06:11:06.145423	Details available Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters. Published: 2023-09-05T00:00:00.000Z Updated: 2024-09-30T19:17:42.611Z Open on db.gcve.eu Reference links https://superstorefinder.net/support/forums/topic/super-store-finder-patch-notes/ https://github.com/redblueteam/CVE-2023-41507/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-3751`	vulnerable	2026-06-08 06:09:40.421047	Super Store Finder POST Parameter index.php sql injection MEDIUM (6.3) A vulnerability was found in Super Store Finder 3.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component POST Parameter Handler. The manipulation of the argument products leads to sql injection. The attack can be launched remotely. The identifier VDB-234421 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2023-07-19T00:00:04.459Z Updated: 2024-08-02T07:01:57.553Z Open on db.gcve.eu Reference links https://vuldb.com/?id.234421 https://vuldb.com/?ctiid.234421	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.