Exrick XMall - SQL Injection

XMall v1.1 was discovered to contain a SQL injection vulnerability via the 'orderDir' parameter. id: CVE-2024-24112 info: name: Exrick XMall - SQL Injection author: DhiyaneshDk severity: critical description: | XMall v1.1 was discovered to contain a SQL injection vulnerability via the 'orderDir'...

CVE-2024-24112

xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter...

CVE-2024-24112

The Exrick XMall e-commerce platform (v1.1 ) is vulnerable to a SQL injection vulnerability (CWE-89) through the orderDir parameter. Unauthenticated attackers can exploit this flaw to extract sensitive database information. The vulnerability has been reported as exploited in the wild and a proof-...