VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 11, 2008· Updated Jun 16, 2026

CVE-2008-3594

CVE-2008-3594

Description

SQL injection vulnerability in viewdetails.php in MagicScripts E-Store Kit-1, E-Store Kit-2, E-Store Kit-1 Pro PayPal Edition, and E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary SQL commands via the pid parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Magicscripts/E Store Kit 13 versions
    cpe:2.3:a:magicscripts:e-store_kit-1:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:magicscripts:e-store_kit-1:*:*:*:*:*:*:*:*
    • cpe:2.3:a:magicscripts:e-store_kit-1:*:*:pro_paypal:*:*:*:*:*
    • (no CPE)
  • Magicscripts/E Store Kit 23 versions
    cpe:2.3:a:magicscripts:e-store_kit-2:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:magicscripts:e-store_kit-2:*:*:*:*:*:*:*:*
    • cpe:2.3:a:magicscripts:e-store_kit-2:*:*:paypal:*:*:*:*:*
    • (no CPE)
  • Magicscripts/E-Store Kit-1 Pro PayPal Editionllm-create

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.