SQL Injection Vulnerability in Phpjabbers PHP Shopping Cart 4.2
CVE-2023-43274
7.5HIGH
Summary
The Phpjabbers PHP Shopping Cart version 4.2 has a security flaw that allows attackers to execute SQL Injection attacks through the manipulation of the 'id' parameter. This vulnerability may enable unauthorized access to the database, potentially exposing sensitive data and compromising the integrity of the application. Developers and administrators should prioritize applying the latest patches and review their input validation mechanisms to mitigate this risk.
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved