Vulnerabilities

TI-2024-29943 CVE-2024-44653 · GHSA-9h6v-vwf5-7vvj

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php.

HIGH 70

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00258 Published 2025-11-17 No fix listed CWE-89

TI-2024-29942 CVE-2024-44652 · GHSA-hp4h-f734-26p3

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email…

HIGH 70

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, user_lastname, and user_address parameters in user_register.php.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00258 Published 2025-11-17 No fix listed CWE-89

TI-2024-29941 CVE-2024-44651 · GHSA-fjw8-vqwx-98mx

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recover_email…

HIGH 70

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recover_email parameter in user_password_recover.php.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00258 Published 2025-11-17 No fix listed CWE-89

Vulnerabilities

Filters

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php.

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email…

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recover_email…