Description
KomSeo Cart 1.3 contains an SQL injection vulnerability that allows attackers to inject SQL commands through the 'my_item_search' parameter in edit.php. Attackers can submit POST requests with malicious SQL payloads to extract sensitive database information using boolean-based blind or error-based injection techniques.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sitemakin | KomSeo Cart | 1.3 | — |
References
- ExploitDB-44753 exploit
- Official Product Homepage product
- VulnCheck Advisory: KomSeo Cart 1.3 SQL Injection via edit.php third-party-advisory