Online Store System Project Online Store System 1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:online_store_system_project:online_store_system:1.0:*:*:*:*:*:*:*part: a version: 1.0 update: *
| Vendor | Online Store System Project (ea596560-a807-5ad6-82f2-51c26a3b68c4) |
|---|---|
| Product | Online Store System (53b13067-01b2-5da1-a6e4-6897476bc635) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-8292 |
vulnerable | 2026-06-08 05:14:23.816285 |
Details available
Online Store System v1.0 delete_product.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion.
Published: 2019-10-01T19:53:28.000Z
Updated: 2024-08-04T21:17:30.505Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8291 |
vulnerable | 2026-06-08 05:14:23.815853 |
Details available
Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for path traversal.
Published: 2019-10-01T19:53:28.000Z
Updated: 2024-08-04T21:17:31.357Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8290 |
vulnerable | 2026-06-08 05:14:23.815413 |
Details available
Vulnerability in Online Store v1.0, The registration form requirements for the member email format can be bypassed by posting directly to sent_register.php allowing special characters to be included and an XSS payload to be injected.
Published: 2019-10-01T19:53:28.000Z
Updated: 2024-08-04T21:17:30.470Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8289 |
vulnerable | 2026-06-08 05:14:23.815051 |
Details available
Vulnerability in Online Store v1.0, stored XSS in admin/user_view.php adidas_member_email variable
Published: 2019-10-01T19:53:28.000Z
Updated: 2024-08-04T21:17:31.149Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8288 |
vulnerable | 2026-06-08 05:14:23.814598 |
Details available
Vulnerability in Online Store v1.0, Stored XSS in user_view.php where adidas_member_user variable is not sanitized.
Published: 2019-10-01T19:53:28.000Z
Updated: 2024-08-04T21:17:30.693Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.