PT-2026-97607 · Unknown · Online-Makeup-Store
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Abdurrab5 online-makeup-store (affected versions not specified)
Description
An issue exists in the Customer Login Handler component within the
customerSignin.php file. Remote manipulation of the username and password arguments allows for SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
SQL injection
Special Elements Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Online-Makeup-Store