PT-2025-47187 · Unknown · Kashipara Ecommerce Website

Published 2025-11-17 · Updated 2025-11-17 · CVE-2024-44653

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Kashipara Ecommerce Website version 1.0

Description The software is susceptible to a SQL Injection issue through the user email parameter in the user login.php file. This allows for potential unauthorized access or manipulation of data. The affected API endpoint is user login.php. The vulnerable parameter is user email.

Recommendations Apply appropriate sanitization and validation techniques to the user email parameter in the user login.php file to prevent SQL Injection attacks.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-44653

Affected Products

Kashipara Ecommerce Website

References · 6

• 🔥 https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44653.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-44653 · Security Note
• https://osv.dev/vulnerability/CVE-2024-44653 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1990526356581482844 · Twitter Post
• https://kashipara.com/project/php/322/ecommerce-website-in-php-with-source-code-download · Note
• https://twitter.com/CVEnew/status/1990485788874645834 · Twitter Post