← Database

CVE-2024-50970

HIGH CVSS: 8.8 Published: 2024-11-13 Modified: 2026-06-17

Description

A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Platforms

Nikoarroyocuraza Online Furniture Shopping Project

Weakness Type

CWE-89, CWE-89

References