This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2019-25672 | BDVDB-2026-324821 Detail

pilusPilusCart

Description#

PilusCart 1.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'send' parameter. Attackers can submit POST requests to the comment submission endpoint with RLIKE-based boolean SQL injection payloads to extract sensitive database information.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact low, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.