Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Error1046

#34558of 53,619
7.5Total CVSS
Vulnerabilities · 1
PT-2015-6783
7.5
2015-06-30
Livelycart · Livelycart · CVE-2015-5148
**Name of the Vulnerable Software and Affected Versions** LivelyCart version 1.2.0 **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `search query` parameter to the "product/search" endpoint. **Recommendations** For LivelyCart version 1.2.0, consider restricting access to the `product/search` endpoint until a patch is available. As a temporary workaround, avoid using the `search query` parameter in this endpoint to minimize the risk of exploitation.