CVE-2024-7882 | THREATINT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection.This issue affects e-Commerce: before 22.11.2024.

Reserved 2024-08-16 | Published 2024-11-22 | Updated 2024-11-26 | Assigner TR-CERT

MEDIUM: 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Problem types

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Product status

Default status

unaffected

Any version before 22.11.2024

affected

Credits

Yagiz BILGILI finder

Privia Security Inc. sponsor

References

www.usom.gov.tr/bildirim/tr-24-1869

cve.org (CVE-2024-7882)

nvd.nist.gov (CVE-2024-7882)

Download JSON