CVE-2025-3557

ScriptAndTools eCommerce-website-in-PHP 3.0 is affected by a cross-site request forgery (CSRF) vulnerability impacting unknown functionality. The issue can be triggered remotely and multiple endpoints are affected. Public exploit information is noted, and the vendor has not responded to disclosur...

CVE-2025-3556 ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication

A vulnerability classified as problematic was found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be...

CVE-2025-3556

CVE-2025-3556 affects ScriptAndTools eCommerce-website-in-PHP 3.0. The vulnerability resides in an unknown functionality of /admin/login.php, where improper restriction of excessive authentication attempts can be exploited remotely. Documents consistently describe high attack complexity and high ...

CVE-2025-3555

A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The...

CVE-2025-3555

A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The...

CVE-2025-3555

CVE-2025-3555 affects ScriptAndTools eCommerce-website-in-PHP 3.0. The vulnerability resides in an unknown function in the file /login.php and leads to improper restriction of excessive authentication attempts. The issue is exploitable remotely with high attack complexity, and the exploit has bee...

CVE-2025-3555 ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication

A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The...

CVE-2025-3555 ScriptAndTools eCommerce-website-in-PHP login.php excessive authentication

A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The...

PT-2025-16210 · Unknown · Scriptandtools Ecommerce-Website-In-Php

Name of the Vulnerable Software and Affected Versions: ScriptAndTools eCommerce-website-in-PHP version 3.0 Description: A problematic issue has been identified in ScriptAndTools eCommerce-website-in-PHP. The issue affects some unknown functionality and allows for cross-site request forgery CSRF...

PT-2025-16209 · Unknown · Scriptandtools Ecommerce-Website-In-Php

Name of the Vulnerable Software and Affected Versions: ScriptAndTools eCommerce-website-in-PHP version 3.0 Description: A problematic vulnerability exists due to improper restriction of excessive authentication attempts. This issue affects an unknown functionality within the /admin/login.php file...

eCommerce-website-in-PHP 安全漏洞

eCommerce-website-in-PHP is a free and open source php e-commerce platform for scriptandtools individual developers. A security vulnerability exists in eCommerce-website-in-PHP version 3.0, which originates from an improperly restricted authentication attempt in file /admin/login.php...

eCommerce-website-in-PHP 安全漏洞

eCommerce-website-in-PHP is a free and open source php e-commerce platform by scriptandtools individual developers. A security vulnerability exists in eCommerce-website-in-PHP version 3.0, which stems from vulnerability to cross-site request forgery attacks...

eCommerce-website-in-PHP 安全漏洞

eCommerce-website-in-PHP is a free and open source php e-commerce platform for scriptandtools individual developers. A security vulnerability exists in eCommerce-website-in-PHP version 3.0, which stems from an improperly restricted authentication attempt in file /login.php...

CVE-2024-54362

Path Traversal: '.../...//' vulnerability in boggibill GetShop ecommerce getshop-ecommerce allows Path Traversal.This issue affects GetShop ecommerce: from n/a through = 1.3...

Cross-site Scripting (XSS)

Overview shopxo/shopxo is an e-commerce system. Affected versions of this package are vulnerable to Cross-site Scripting XSS through multiple components. An attacker can manipulate the web application and perform unauthorized actions or access sensitive data by sending crafted requests or injecti...

CVE-2024-54362

Path Traversal: '.../...//' vulnerability in boggibill GetShop ecommerce getshop-ecommerce allows Path Traversal.This issue affects GetShop ecommerce: from n/a through = 1.3...

CVE-2024-54362

CVE-2024-54362 is a path traversal vulnerability in the WordPress plugin GetShop ecommerce (versions

CVE-2024-54362 WordPress GetShop ecommerce plugin <= 1.3 - Path Traversal vulnerability

Path Traversal: '.../...//' vulnerability in boggibill GetShop ecommerce getshop-ecommerce allows Path Traversal.This issue affects GetShop ecommerce: from n/a through = 1.3...

ShopXO 安全漏洞

ShopXO is an open source enterprise-grade open source e-commerce system from ShopXO Inc. A security vulnerability exists in ShopXO v6.4.0, which stems from the presence of server-side request forgery and cross-site scripting in multiple locations...

WordPress plugin GetShop ecommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...