PT-2025-47177 · Unknown · Kashipara Ecommerce Website

Published 2025-11-17 · Updated 2025-11-17 · CVE-2024-44651

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Kashipara Ecommerce Website version 1.0

Description The Kashipara Ecommerce Website is susceptible to a SQL Injection issue through the recover email parameter in the user password recover.php file. This allows for potential unauthorized access to the database.

Recommendations Apply input validation and sanitization to the recover email parameter in the user password recover.php file.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-44651

Affected Products

Kashipara Ecommerce Website

References · 6

• 🔥 https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44651.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-44651 · Security Note
• https://osv.dev/vulnerability/CVE-2024-44651 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1990523796655088002 · Twitter Post
• https://kashipara.com/project/php/322/ecommerce-website-in-php-with-source-code-download · Note
• https://twitter.com/CVEnew/status/1990477797442072862 · Twitter Post