PT-2024-38828 · Unknown · Itsourcecode E-Commerce Website

Thorat

·

Published

2024-08-24

·

Updated

2024-09-04

·

CVE-2024-8139

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: itsourcecode E-Commerce Website version 1.0
Description: A critical vulnerability has been found in the itsourcecode E-Commerce Website, affecting an unknown functionality of the file search list.php. The manipulation of the user argument leads to SQL injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Recommendations: For itsourcecode E-Commerce Website version 1.0, consider upgrading to version 1.1 to mitigate risks. As a temporary workaround, consider restricting access to the search list.php file or disabling the functionality that manipulates the user argument until a patch is available. Monitor for updates and ensure systems are secure.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-8139

Affected Products

Itsourcecode E-Commerce Website