Description
E-Commerce-Website-Using-PHP是一款免费开源的全功能电商网站项目。 E-Commerce-Website-Using-PHP 1.0版本存在注入漏洞，该漏洞源于对参数p_cat的错误操作会导致SQL注入。
E-Commerce-Website-Using-PHP 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/geo-chen/E-Commerce
https://nvd.nist.gov/vuln/detail/CVE-2024-12884
https://geochen.medium.com/sqli-in-login-php-of-e-commerce-website-using-php-1abacb5e2ccd
https://cve.imfht.com/detail/CVE-2025-2041
https://www.sentinelone.com/vulnerability-database/cve-2025-2041/
https://medium.com/@ananda.krishnanprofficial/how-i-identified-a-sql-injection-vulnerability-in-an-e-commerce-website-b19aa43777d8
https://vuldb.com/submit/669747