Skip to content
OpenAdvisories

Product · pilus

PilusCart

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2019-25672

    PilusCart 1.4.1 SQL Injection via send Parameter

    PilusCart 1.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'send' parameter. Attackers can submit POST requests to the comment submission endpoint with RLIKE-ba…

    pilus PilusCart