CVE-2024-44664

概要

参考情報

• leexsoyoung/CVEs · Exploit
• phpgurukul.com/shopping-portal-free-download · Product

online shopping portal のその他の脆弱性

• CVE-2025-65647中 4.3Insecure Direct Object Reference (IDOR) in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure v…
• CVE-2024-44661中 5.4PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php.
• CVE-2024-44659緊急 9.8PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.
• CVE-2024-44663中 6.5PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php.
• CVE-2024-44662中 6.5PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page.