Online Shop Project
Approved changes feed: RSS · Atom
cpe:2.3:a:oretnom23:online_shop_project:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Oretnom23 (bb7583fb-f029-599f-a8a3-33d64769aa1f) |
|---|---|
| Product | Online Shop Project (12c9331a-b03b-5725-914f-84f1a88fabaf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-13451 |
vulnerable | 2026-06-08 07:04:32.223582 |
SourceCodester Online Shop Project action.php sql injection
HIGH (7.3)
A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Published: 2025-11-20T03:02:09.496Z
Updated: 2025-11-20T19:20:20.915Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13450 |
vulnerable | 2026-06-08 07:04:32.222218 |
SourceCodester Online Shop Project register.php cross site scripting
LOW (3.5)
A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument f_name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-11-20T03:02:06.705Z
Updated: 2025-11-20T19:15:38.354Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13449 |
vulnerable | 2026-06-08 07:04:32.221098 |
code-projects Online Shop Project login.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.
Published: 2025-11-20T02:32:10.250Z
Updated: 2025-11-20T19:13:58.271Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.