CVE-2024-42404: SQL Injection
Published Sep 18, 2024
·Updated
SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the information stored in the database.
Affected Software
2 affected components
Welcart e-Commerce<2.11.2
Welcart Welcart e-Commerce WordPress<2.11.2
Event History
Sep 18, 2024
CVE Published
via MITRE·05:20 AM
Data Sourced
via MITRE·05:20 AM
DescriptionWeakness
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-42404?
CVE-2024-42404 has a high severity due to its potential to allow SQL injection attacks.
2
How do I fix CVE-2024-42404?
To fix CVE-2024-42404, upgrade Welcart e-Commerce to version 2.11.2 or later.
3
What systems are affected by CVE-2024-42404?
CVE-2024-42404 affects Welcart e-Commerce versions prior to 2.11.2.
4
What type of vulnerability is CVE-2024-42404?
CVE-2024-42404 is classified as an SQL injection vulnerability.
5
Who can exploit CVE-2024-42404?
An attacker who can log in to the product can exploit CVE-2024-42404.