CVE-2024-44652

The Kashipara Ecommerce Website version 1.0 is vulnerable to SQL Injection due to a lack of input validation on the user_register.php file. Specifically, the user_email, username, user_firstname, user_lastname, and user_address parameters are not properly sanitized, which could allow an attacker ...