Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-64111
HistoryJun 09, 2022 - 12:00 a.m.

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar SQL Injection Vulnerability

2022-06-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.002 Low

EPSS

Percentile

53.2%

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to SQL injection, which stems from The keyword parameter of the search_product.php page lacks validation for external input SQL statements. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

0.002 Low

EPSS

Percentile

53.2%

Related for CNVD-2022-64111