Beveiligingsadvies

CVE-2024-4826

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-16 12:07:01

Laatst bijgewerkt 2024-08-01 20:55:10

Toegewezen door INCIBE

CVSS-score 9.8

Status PUBLISHED

Beschrijving

SQL injection vulnerability in Simple PHP Shopping Cart affecting version 0.9. This vulnerability could allow an attacker to retrieve all the information stored in the database by sending a specially crafted SQL query, due to the lack of proper sanitisation of the category_id parameter in the category.php file.

← Alle CVE's bekijken Bekijk op cve.org ↗