CVE-2024-2351

CVE-2024-2351 affects CodeAstro Ecommerce Site 1.0. The flaw is in the action.php of the Search component, where manipulating the arguments cat_id, brand_id, or keyword leads to SQL injection. It can be exploited remotely, and the exploit has been disclosed publicly. Public sources identify the v...