CVE-2024-12794: Codezips E-Commerce Site editorder.php sql injection
A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0. This affects an unknown part of the file /admin/editorder.php. The manipulation of the argument dstatus/quantity/ddate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12794?
CVE-2024-12794 is classified as a critical vulnerability.
How does CVE-2024-12794 affect Codezips E-Commerce Site 1.0?
CVE-2024-12794 affects the file /admin/editorder.php, allowing for SQL injection attacks.
What are the potential impacts of exploiting CVE-2024-12794?
Exploiting CVE-2024-12794 can lead to unauthorized access to the database and manipulation of sensitive data.
Is remote exploitation possible with CVE-2024-12794?
Yes, CVE-2024-12794 can be exploited remotely.
How do I fix CVE-2024-12794?
To fix CVE-2024-12794, ensure that input data is properly sanitized and implement security measures against SQL injection.