Phpstore develops a focused suite of PHP-based web applications for e-commerce and classifieds use cases, including auto classifieds, real estate, and job-listing platforms that depend on database-backed content management. The vendor's vulnerability profile centers on SQL injection flaws recurring across its product line, a weakness inherent to dynamic SQL construction in web applications, and these disclosures frequently acquire public exploit code. Defenders deploying Phpstore applications should prioritize input-validation and parameterized-query hardening, and treat this vendor's advisories as requiring timely patching; live severity and exploitation counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Phpstore over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-5493HIGH SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbitrary SQL commands via the id parameter. | Dec 12, 2008 | 7.5 | 28 | NO | YES |
CVE-2008-5490HIGH SQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote attackers to execute arbitrary SQL commands via the id parameter. | Dec 12, 2008 | 7.5 | 28 | NO | YES |
CVE-2008-6931MEDIUM Unrestricted file upload vulnerability in PHPStore Job Search (aka PHPCareers) allows remote authenticated users to execute arbitrary code by uploading a file with an executable ex | Aug 11, 2009 | 6.5 | 27 | NO | YES |
CVE-2008-6930MEDIUM Unrestricted file upload vulnerability in PHPStore Real Estate allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a log | Aug 11, 2009 | 6.5 | 27 | NO | YES |
CVE-2008-6929MEDIUM Unrestricted file upload vulnerability in PHPStore Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as | Aug 11, 2009 | 6.5 | 27 | NO | YES |
CVE-2008-6928MEDIUM Unrestricted file upload vulnerability in PHPStore Complete Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension | Aug 11, 2009 | 6.5 | 26 | NO | YES |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Phpstore.
Media articles that mention a CVE ID that affects a product developed by Phpstore — matched by CVE ID, not by vendor name.