PT-2026-30488 · Php Scripts Mall · Advance Gift Shop Pro Script

Mr Winst0N · Published 2026-04-05 · Updated 2026-04-05 · CVE-2019-25680

Mitre

CVSS v3.1

8.2

High

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Advance Gift Shop Pro Script 2.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the search parameter. Attackers can submit crafted SQL payloads in the 's' parameter of search requests to extract sensitive database information including version details and other data.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-25680

Affected Products

Advance Gift Shop Pro Script

References · 4

• 🔥 https://exploit-db.com/exploits/46457 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25680 · Security Note
• http://phpscriptsmall.com · Note
• https://vulncheck.com/advisories/advance-gift-shop-pro-script-sql-injection-via-search · Note