CVE-2025-2041: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in s-a-zhd Ecommerce-Website-using-PHP 1.0. Affected by this issue is some unknown functionality of the file /shop.php. The manipulation of the argument pcat leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2025-2036: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0. It has been classified as critical. This affects an unknown part of the file details.php. The manipulation of the argument proid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-2035: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /customerregister.php. The manipulation of the argument name leads to unrestricted upload. The attack may be launched remotely. The...