CVE-2024-4070

· MEDIUMAnalyzed

← All CVEs

CVSS v3.1

6.3

EPSS

0.60%

Published

Apr 23, 2024

Modified

Feb 27, 2025

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0 and classified as critical. This vulnerability affects unknown code of the file prodList.php. The manipulation of the argument prodType leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-261796.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-89

Affected Products (1)

aditya88 · online_furniture_shopping_ecommerce_websitevulnerable

References (8)

https://github.com/E1CHO/cve_hub/blob/main/Online%20Furniture%20Shopping%20Ecommerce%20Website/Online%20Furniture%20Shopping%20Ecommerce%20Website%20Project%20-%20vuln%202.pdf

ExploitThird Party Advisory

https://vuldb.com/?ctiid.261796

Permissions RequiredVDB Entry

https://vuldb.com/?id.261796