VULNERABILITY INTELLIGENCE

CVE-2024-50970

CVSS score8.8 HIGH

EPSS probability0.52%

CISA KEVNot currently listed

Published2024-11-13

Last modified2026-06-17

Description

A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.