VYPR
← All advisories
Medium severity6.0NVD Advisory· Published Oct 31, 2024· Updated Jun 17, 2026

CVE-2024-50802

CVE-2024-50802

Description

A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_grid/email_templates.php. The vulnerability is exploitable via the id parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • AbanteCart/AbanteCartllm-fuzzy3 versions
    <1.4.0+ 2 more
    • (no CPE)range: <1.4.0
    • (no CPE)
    • cpe:2.3:a:abantecart:abantecart:1.4.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.