CVE-2024-40498

The PuneethReddyHC Online Shopping system advanced v.1.0 is vulnerable to a SQL Injection in the register.php file. The root cause is the lack of input sanitization for the $address1 and $address2 POST parameters at line 117, while other fields like email and name are properly handled. An unauthe...