SQL Injection Vulnerability in Kashipara Ecommerce Website

CVE-2024-44653

What is CVE-2024-44653?

The Kashipara Ecommerce Website version 1.0 is vulnerable to a SQL Injection attack through the 'user_email' parameter in the 'user_login.php' script. This vulnerability allows unauthorized attackers to manipulate SQL queries by injecting malicious SQL code. If exploited, it could lead to unauthorized access to sensitive data, compromise of user accounts, and potential complete database control. Organizations using this software are advised to implement immediate security patches and review their application security practices.

References