Security Advisory

CVE-2024-9974

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-10-15 09:31:07

Last updated 2024-10-15 13:38:39

Assigner VulDB

State PUBLISHED

Description

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php?f=add_to_card of the component POST Request Handler. The manipulation of the argument product_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

← Browse all CVEs View on cve.org ↗