CVE-2024-4826

CVSS 3.1 Score 9.8 of 10 (high)

Attack Complexity low
Confidentiality high
Integrity high
Availability high
Scope unchanged
Privileges Required none

Details

Published May 16, 2024
CWE ID 89

Summary

CVE-2024-4826 is a newly disclosed SQL injection vulnerability that affects the Simple PHP Shopping Cart version 0.9. This issue arises due to insufficient sanitization of the category_id parameter in the category.php file, allowing an attacker to inject malicious SQL queries. Successful exploitation could grant unauthorized access to all the data stored in the database, potentially leading to significant data breaches. System administrators are strongly advised to update their shopping cart software to a secure version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share