PT-2025-47169 · Unknown · Kashipara Ecommerce Website

Published 2025-11-17 · Updated 2025-11-17 · CVE-2024-44652

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Kashipara Ecommerce Website version 1.0

Description The Kashipara Ecommerce Website is susceptible to SQL Injection. The issue affects the user register.php file and involves the user email, username, user firstname, user lastname, and user address parameters. Exploitation of this issue could allow an attacker to manipulate database queries.

Recommendations Apply input validation and sanitization to the user email, username, user firstname, user lastname, and user address parameters in the user register.php file.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-44652

Affected Products

Kashipara Ecommerce Website

References · 7

• 🔥 https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44652.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-44652 · Security Note
• https://osv.dev/vulnerability/CVE-2024-44652 · Vendor Advisory
• https://kashipara.com/project/php/322/ecommerce-website-in-php-with-source-code-download · Note
• https://twitter.com/VulmonFeeds/status/1990546834801016992 · Twitter Post
• https://twitter.com/CVEnew/status/1990473998900035717 · Twitter Post
• https://t.me/CVEtracker/37509 · Telegram Post