CVE-2025-2036

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0. It has been classified as critical. This affects an unknown part of the file details.php. The manipulation of the argument proid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

Ecommerce-Website 注入漏洞

Ecommerce-Website is a complete e-commerce website with an administration panel built using PHP and MySql. An injection vulnerability exists in Ecommerce-Website version 1.0, which stems from an incorrect operation of the parameter proid that can lead to SQL injection...

CVE-2025-2036: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0. It has been classified as critical. This affects an unknown part of the file details.php. The manipulation of the argument proid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2008-3713: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via the proid parameter...

PHPBasket 'pro_id' SQL注入漏洞

BUGTRAQ ID: 30726 CNCAN ID：CNCAN-2008081902 PHPBasket是一款基于PHP的WEB应用程序。 PHPBasket不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'product.php'脚本对用户提交给'proid'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 PHPBasket 目前没有解决方案提供： http://www.phpbasket.com/...

PHPBasket - pro_id SQL Injection

PHPBasket - proid SQL Injection . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - jeed - baltazar - P47r1ck - C1c4Tr1Z - beenu --- rsauron - letsgorun - K1u - DON - OutLawz...