Online Shopping System
Approved changes feed: RSS · Atom
cpe:2.3:a:surya2developer:online_shopping_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Surya2Developer (725965a5-df0c-5910-be60-44fef4a63a65) |
|---|---|
| Product | Online Shopping System (e04bc8b4-b3b1-5136-95c3-8adc85b4811a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-1971 |
vulnerable | 2026-06-08 06:27:15.153588 |
Surya2Developer Online Shopping System POST Parameter login.php sql injection
HIGH (7.3)
A vulnerability has been found in Surya2Developer Online Shopping System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Parameter Handler. The manipulation of the argument password with the input nochizplz'+or+1%3d1+limit+1%23 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255127.
Published: 2024-02-28T20:31:05.897Z
Updated: 2025-04-22T15:56:35.655Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.