Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:online_shop_project:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductOnline Shop Project (6dc2eb94-ca64-5e95-a6ea-c5caa37ad979)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-13451 vulnerable 2026-06-08 07:04:32.223518 SourceCodester Online Shop Project action.php sql injection
HIGH (7.3)
A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Published: 2025-11-20T03:02:09.496Z
Updated: 2025-11-20T19:20:20.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13450 vulnerable 2026-06-08 07:04:32.222150 SourceCodester Online Shop Project register.php cross site scripting
LOW (3.5)
A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument f_name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-11-20T03:02:06.705Z
Updated: 2025-11-20T19:15:38.354Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.