CVE-2025-2035

CVE-2025-2035 affects s-a-zhd Ecommerce-Website-using-PHP 1.0. The vulnerability is in /customer_register.php where manipulation of the argument name enables unrestricted upload. The issue can be exploited remotely, and the exploit has been disclosed publicly. No remediation details are provided ...

CVE-2025-2035

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /customerregister.php. The manipulation of the argument name leads to unrestricted upload. The attack may be launched remotely. The...

hulapunk.com Cross Site Scripting vulnerability OBB-4033259

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-27424

Websites redirecting to a non-HTTP scheme URL could allow a website address to be spoofed for a malicious page. This vulnerability was fixed in Firefox for iOS 136...

CVE-2024-9149

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...

zfood.co.uk Cross Site Scripting vulnerability OBB-4033234

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sukaichi-e.com Cross Site Scripting vulnerability OBB-4033224

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sebulli.com Cross Site Scripting vulnerability OBB-4033185

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

seasunliners.dk Cross Site Scripting vulnerability OBB-4033184

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

orgeo.ru Cross Site Scripting vulnerability OBB-4033150

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

obcan.ecn.cz Cross Site Scripting vulnerability OBB-4033126

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

nounoudunord.centerblog.net Cross Site Scripting vulnerability OBB-4033120

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

museumcollection.winterthur.org Cross Site Scripting vulnerability OBB-4033082

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

camelback.cc Cross Site Scripting vulnerability OBB-4033055

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ziondaily.com Cross Site Scripting vulnerability OBB-4032964

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

crebaco.com Cross Site Scripting vulnerability OBB-4032951

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Ecommerce-Website 注入漏洞

Ecommerce-Website is a complete e-commerce website with an administration panel built using PHP and MySql. An injection vulnerability exists in Ecommerce-Website version 1.0, which stems from an incorrect operation of the parameter proid that can lead to SQL injection...

E-Commerce-Website-Using-PHP 代码问题漏洞

E-Commerce-Website-Using-PHP is a free and open source full-featured e-commerce website project. A code issue vulnerability exists in E-Commerce-Website-Using-PHP version 1.0, which stems from an incorrect manipulation of the parameter name can lead to unlimited uploads...

CVE-2025-2035: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /customerregister.php. The manipulation of the argument name leads to unrestricted upload. The attack may be launched remotely. The...

PT-2025-9989

Name of the Vulnerable Software and Affected Versions Ecommerce-Website-using-PHP version 1.0 Description A critical issue has been found, affecting an unknown part of the file details.php. The manipulation of the pro id argument leads to SQL injection. It is possible to initiate the attack...