CVE-2024-42404

SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the information stored in the database.

Score

CVSS 3.1 8.8 High

Status

Analyzed - vultures@jpcert.or.jp

Published

2024-09-18

Last modified

2024-09-18

Weaknesses

CWE-89

Affected products

• Welcart (Collne)
• Welcart E-commerce (Welcart)
• Welcart E-commerce (Welcart Inc.)

References

• https://jvn.jp/en/jp/JVN19766555/
• https://www.welcart.com/archives/22581.html