CVE-2023-50847 — SQL Injection in INC Welcart E-commerce

CWE-89 — SQL Injection3 documents3 sources

Severity

7.2HIGHNVD

CNA7.6

EPSS

0.3%

top 47.44%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Collne INC Welcart E-commerce Welcart E-commerce

Timeline

PublishedDec 28

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Collne Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.3.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5collne_inc/welcart_e-commercen/a — 2.9.3

▶NVDwelcart/welcart_e-commerce2.9.3

🔴Vulnerability Details

GHSA

GHSA-pp4m-v63p-xvqj: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Collne Inc↗2023-12-28

▶

CVEList

WordPress Welcart e-Commerce Plugin <= 2.9.3 is vulnerable to SQL Injection↗2023-12-28

▶