CNNVD-202511-2212 Information
Nov 19, 2025
cve
CNNVD ID
CNNVD-202511-2212
Related CVE
- CNNVD Published: 2025-11-19
Description (Chinese)
PHP-ECOMMERCE-PROJECT是MD RAHATUL RABBI个人开发者的一个电子商务网站。 PHP-ECOMMERCE-PROJECT v1.0及之前版本存在安全漏洞，该漏洞源于/ecommerce/products.php组件的id参数存在反射型跨站脚本，可能导致执行任意Javascript代码。
Description (English)
PHP-ECOMMERCE-PROJECT is an e-commerce web site for MD RAHATUL RABBI personal developers. PHP-ECOMMERCE-PROJECT v1.0 and previous versions had a security loophole, which originated in the id parameters of the /ecomerce/products.php component, which had reflected cross-site scripts that could lead to the implementation of any Javascript code.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
个人开发者
Published
2025-11-19
Last Modified
2026-02-24
References
https://github.com/rumanaemu/CVE-Research/blob/main/CVE-2025-63879.md https://www.linkedin.com/in/rumana-khatun-208aa731b/ https://access.redhat.com/security/cve/cve-2025-63879
Share on: