E-commerce 1.0 | details.php?pro_id= SQL Injection | Found By Maloy Roy Orko
Hi All, I am Maloy Roy Orko. CVE Number: CVE-2025-2036 Recently in one of my pentest research, I found an Ecommerce-Website-using-PHP, Bootstrap4, Html5, Css3 By SHAHID AFRIDI ZIHAD which is an open source E-commerce application using native PHP. Curious to explore its functionalities, I downloaded and set it up in my local system. After fiddling with the source code, I found that it did not have any kind of SQL Injection protection. It can lead into mass user data in risk and database leaks can be happened by hackers too and admin panel credentials were in risk too. The Main Thing Is : if any NON-IT personal uses this template,he will fall into this vulnerability and his companies reputation can be lost too.Thats why I am trying to inform everyone about this. Title of the Vulnerability: E-commerce 1.0 | details.php?pro_id= SQL Injection | Found By Maloy Roy Orko Vulnerability Class: SQL Injection Product Name: E-comm...