PT-2024-30839
CVE-2024-43976
·
Published
2024-09-17
·
Updated
2024-09-24
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Super Store Finder versions n/a through 6.9.7
Description
The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements in SQL commands. This allows for SQL Injection attacks.
Recommendations
For versions n/a through 6.9.7, consider disabling any functionality that uses SQL commands with user-inputted data until a patch is available. Restrict access to sensitive database elements to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾