CVE-2024-31823

CVE-2024-31823 affects Ecommerce-CodeIgniter-Bootstrap due to a code-execution flaw in the Publish.php component’s removeSecondaryImage method (commit d22b54e8915f167a135046ceb857caaf8479c4da). Remote attackers can trigger arbitrary code execution; CVSS 3.1 base score 8.8 (HIGH) with network acce...

CVE-2024-31821

CVE-2024-31821 affects Ecommerce-CodeIgniter-Bootstrap. The issue is a SQL Injection in the manageQuantitiesAndProcurement method of the Orders_model.php component, triggered by commit d22b54e8915f167a135046ceb857caaf8479c4da. This allows a remote attacker to potentially execute arbitrary code. T...