PT-2026-5555 · Unknown · Mult-E-Cart Ultimate

Published 2026-02-01 · Updated 2026-02-05 · CVE-2021-47909

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Mult-E-Cart Ultimate version 2.4

Description The software contains multiple SQL injection flaws within the inventory, customer, vendor, and order modules. Attackers with vendor or administrator privileges can exploit the id parameter to execute malicious SQL commands, potentially compromising the database management system.

Recommendations Apply updates to address the SQL injection flaws in the inventory, customer, vendor, and order modules.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-47909

Affected Products

Mult-E-Cart Ultimate

References · 9

• 🔥 https://vulnerability-lab.com/get_content.php?id=2306 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47909 · Security Note
• https://t.me/cveNotify/150498 · Telegram Post
• https://vulncheck.com/advisories/mult-e-cart-ultimate-sql-injection-via-vulnerable-id-parameters · Note
• https://twitter.com/CVEnew/status/2017954086621172171 · Twitter Post
• https://techraft.in · Note
• https://twitter.com/cracbot/status/2019365428888498643 · Twitter Post
• https://t.me/CVEtracker/43406 · Telegram Post
• https://ultimate.multecart.com · Note