SQL Injection Vulnerability in PHPGurukul Online Shopping Portal
CVE-2024-44664
6.5MEDIUM
What is CVE-2024-44664?
The PHPGurukul Online Shopping Portal 2.0 is susceptible to SQL Injection attacks through multiple parameters, including 'name', 'summary', 'review', 'quality', 'price', and 'value' in the 'product-details.php' file. This vulnerability allows attackers to execute arbitrary SQL queries, potentially compromising sensitive data and the integrity of the database.
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved