Security Advisory

CVE-2024-12794

6.3
MEDIUM

Vulnerability Description

A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0. This affects an unknown part of the file /admin/editorder.php. The manipulation of the argument dstatus/quantity/ddate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published Date December 19, 2024
Official Source NIST NVD Advisory