Approved changes feed: RSS · Atom

cpe:2.3:a:donbermoy:advanced_web_store:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorDonbermoy (7119d731-b45a-52d3-86d0-510723217d29)
ProductAdvanced Web Store (6624e8fa-b45e-58c9-9a5b-313b41d11787)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4314 vulnerable 2026-06-08 07:29:16.021997 SourceCodester Advanced Web Store index.php sql injection
HIGH (7.3)
A vulnerability has been found in SourceCodester Advanced Web Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument txtLogin leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-06T04:31:07.590Z
Updated: 2025-05-06T14:05:05.619Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4313 vulnerable 2026-06-08 07:29:16.021599 SourceCodester Advanced Web Store admin_addnew_product.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, was found in SourceCodester Advanced Web Store 1.0. Affected is an unknown function of the file /admin/admin_addnew_product.php. The manipulation of the argument txtProdId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-06T04:31:05.351Z
Updated: 2025-05-06T14:44:10.883Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4312 vulnerable 2026-06-08 07:29:16.020968 SourceCodester Advanced Web Store productdetail.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.php. The manipulation of the argument prodid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-06T04:00:10.174Z
Updated: 2025-05-06T14:20:46.489Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.