Skip to content
OpenAdvisories

Vendor

Techraft

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.1

    Mult-E-Cart Ultimate 2.4 SQL Injection via Vulnerable ID Parameters

    Mult-E-Cart Ultimate 2.4 contains multiple SQL injection vulnerabilities in inventory, customer, vendor, and order modules. Remote attackers with privileged vendor or admin roles can exploit the 'id' parameter to execute malicious SQL commands and compromise …