Description
Ecommerce-Website是完整的电子商务网站，带有使用 PHP 和 MySql 构建的管理面板。 Ecommerce-Website 1.0版本存在注入漏洞，该漏洞源于对参数pro_id的错误操作会导致SQL注入。
Ecommerce-Website 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.circl.lu/vuln/cnvd-2025-23964
https://www.knowsafe.com/ti/info/0/994138
https://blog.csdn.net/qq_23003811/article/details/140838022
https://vulnerability.circl.lu/vuln/cve-2025-11037
https://avd.aliyun.com/detail?id=AVD-2022-27346
https://medium.com/@ananda.krishnanprofficial/how-i-identified-a-sql-injection-vulnerability-in-an-e-commerce-website-b19aa43777d8
https://github.com/h4md153v63n/CVEs/blob/main/E-Commerce_Website/E-Commerce%20Website%20-%20SQL%20Injection%202.md
https://www.sentinelone.com/vulnerability-database/cve-2025-2036/
https://dbugs.ptsecurity.com/vulnerability/PT-2026-40900
https://access.redhat.com/security/cve/cve-2024-44652
https://cve.imfht.com/detail/CVE-2024-4069?lang=en