CVE-2024-7882 | THREATINT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection. This issue affects e-Commerce: before 22.11.2024.

PUBLISHED Reserved 2024-08-16 | Published 2024-11-22 | Updated 2026-06-02 | Assigner TR-CERT

MEDIUM: 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Problem types

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Product status

Default status

unaffected

Any version before 22.11.2024

affected

Credits

Yagiz BILGILI finder

Privia Security Inc. sponsor

References

www.usom.gov.tr/bildirim/tr-24-1869 government-resource broken-link

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1869 government-resource

cve.org (CVE-2024-7882)

nvd.nist.gov (CVE-2024-7882)

Download JSON