Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-4826

SQL injection vulnerability in Simple PHP Shopping Cart

Description

SQL injection vulnerability in Simple PHP Shopping Cart affecting version 0.9. This vulnerability could allow an attacker to retrieve all the information stored in the database by sending a specially crafted SQL query, due to the lack of proper sanitisation of the category_id parameter in the category.php file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Asaancart Simple PHP Shopping Cart

Default version status: unaffected

  • 0.9affected

References