| Title | SHAHID AFRIDI ZIHAD E-commerce 1.0 SQL Injection |
|---|
| Description | E-commerce 1.0 | shop.php?p_cat= SQL Injection | Found By Maloy Roy Orko
Title of the Vulnerability: E-commerce 1.0 | shop.php?p_cat= SQL Injection | Found By Maloy Roy Orko
Vulnerability Class: SQL Injection
Product Name: E-commerce 1.0
Vendor: https://github.com/s-a-zhd/
Vulnerable Product Link:
https://github.com/s-a-zhd/Ecommerce-Website-using-PHP
Technical Details & Description: The application source code is coded in a way which allows SQL Injection. This leads into mass user data in risk and database leaks can be happened by hackers too and admin panel credentials were in risk too. |
|---|
| Source | ⚠️ https://www.websecurityinsights.my.id/2025/03/e-commerce-10-shopphppcat-sql-injection.html?m=1 |
|---|
| User | MaloyRoyOrko (UID 79572) |
|---|
| Submission | 03/03/2025 07:36 (1 Year ago) |
|---|
| Moderation | 03/06/2025 10:29 (3 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 298784 [s-a-zhd Ecommerce-Website-using-PHP 1.0 /shop.php p_cat sql injection] |
|---|
| Points | 20 |
|---|