CVE-2024-12794

A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0. This affects an unknown part of the file /admin/editorder.php. The manipulation of the argument dstatus/quantity/ddate leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2024-12794

creationtimestamp| type| source ---|---|--- 2024-12-19 18:11:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113680835451609002 2024-12-19 18:15:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoi4o4kkd2a 2024-12-19 19:50:17+00:00| seen|...

CVE-2024-12794 Codezips E-Commerce Site editorder.php sql injection

A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0. This affects an unknown part of the file /admin/editorder.php. The manipulation of the argument dstatus/quantity/ddate leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2024-12794

CVE-2024-12794 affects Codezips E-Commerce Site 1.0, specifically the /admin/editorder.php file. The vulnerability arises from manipulating the dstatus/quantity/ddate parameter, leading to SQL injection. Evidence across multiple sources confirms remote feasibility and public disclosure, indicatin...