CVE-2024-1971

CVE-2024-1971 affects Surya2Developer Online Shopping System 1.0. The vulnerability is a SQL injection in the POST Parameter Handler’s file login.php, triggered by manipulating the password parameter (example payload: nochizplz'+or+1%3d1+limit+1%23). The attack can be launched remotely, and publi...