CVE-2024-13205 kurniaramadhan E-Commerce-PHP Create Product Page create_product.php cross site scripting

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/createproduct.php of the component Create Product Page. The manipulation of the argument Name leads to cross site scripting. Th...

CVE-2024-13204 kurniaramadhan E-Commerce-PHP blog-details.php sql injection

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /blog-details.php. The manipulation of the argument blogid leads to sql injection. The attack can be launched remotely. The...

CVE-2024-13204

CVE-2024-13204 affects kurniaramadhan E-Commerce-PHP 1.0. The vulnerable component is the /blog-details.php file, where manipulating the blog_id parameter triggers a SQL injection. Exploitation is described as remote with the exploit publicly disclosed. Multiple sources corroborate the issue and ...

CVE-2024-13204 kurniaramadhan E-Commerce-PHP blog-details.php sql injection

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /blog-details.php. The manipulation of the argument blogid leads to sql injection. The attack can be launched remotely. The...

CVE-2024-13203

CVE-2024-13203 concerns the kurniaramadhan E-Commerce-PHP 1.0 application. The publicly provided records indicate a vulnerability in an unspecified function that enables cross-site request forgery (CSRF) and can be triggered remotely. The exact vulnerable component, affected versions beyond 1.0, ...

CVE-2024-13203 kurniaramadhan E-Commerce-PHP cross-site request forgery

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did...

CVE-2024-13203 kurniaramadhan E-Commerce-PHP cross-site request forgery

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Commerce View Receipt prior to version 1.0.3, which stems from the inclusion of an authorization error vulnerability...

PT-2025-4734 · Wp E Commerce · Wpecommerce Sell Digital Downloads

Name of the Vulnerable Software and Affected Versions: wpecommerce Sell Digital Downloads versions 2.2.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

E-Commerce-PHP 安全漏洞

E-Commerce-PHP is an e-commerce application using native PHP by the individual developer Kurnia Ramadhan Putra. A security vulnerability exists in E-Commerce-PHP version 1.0 that stems from vulnerability to cross-site request forgery attacks...

PT-2025-2061 · Unknown · Kurniaramadhan E-Commerce-Php

Name of the Vulnerable Software and Affected Versions: kurniaramadhan E-Commerce-PHP version 1.0 Description: A vulnerability was found in the software, classified as problematic. It affects an unknown function, leading to cross-site request forgery. The attack can be launched remotely. The vendo...

E-Commerce-PHP 注入漏洞

E-Commerce-PHP is an e-commerce application using native PHP by the individual developer Kurnia Ramadhan Putra. An injection vulnerability exists in E-Commerce-PHP version 1.0, which stems from the blogid parameter of the file /blog-details.php that causes SQL injection...

PT-2025-2062 · Unknown · Kurniaramadhan E-Commerce-Php

Name of the Vulnerable Software and Affected Versions: kurniaramadhan E-Commerce-PHP version 1.0 Description: A critical issue affects an unknown functionality of the file /blog-details.php. The manipulation of the blog id argument leads to SQL injection. The attack can be launched remotely. The...

PT-2025-2063 · Unknown · Kurniaramadhan E-Commerce-Php

Name of the Vulnerable Software and Affected Versions: kurniaramadhan E-Commerce-PHP version 1.0 Description: A problem was found in the Create Product Page component, specifically in the /admin/create product.php file. The issue is related to the manipulation of the Name argument, which leads to...

CVE-2025-22339

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in athemeart Store Commerce store-commerce allows DOM-Based XSS.This issue affects Store Commerce: from n/a through = 1.2.3...

CVE-2025-22339 WordPress Store Commerce theme <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in athemeart Store Commerce store-commerce allows DOM-Based XSS.This issue affects Store Commerce: from n/a through = 1.2.3...

CVE-2025-22339

CVE-2025-22339 describes a DOM-based XSS in Store Commerce (a ThemeArt Store Commerce component). Affected: Store Commerce Theme (WordPress). Technical detail from provided sources: vulnerability stems from improper neutralization of input during web page generation, enabling DOM-Based XSS. The i...

CVE-2025-22339 WordPress Store Commerce theme <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in athemeart Store Commerce store-commerce allows DOM-Based XSS.This issue affects Store Commerce: from n/a through = 1.2.3...

WordPress plugin Store Commerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-22385

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. For newly created accounts, the Commerce B2B application does not require email confirmation. This medium-severity issue allows the mass creation of accounts. This could affect database storage; also, non-requested...