Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2024-7882: Special Minds Design and Software e-Commerce SQL Injection Risk

CVE-2024-7882 · published 1 year ago

Summary

A security weakness in Special Minds Design and Software e-Commerce allows attackers to manipulate database queries, which could lead to sensitive data exposure or system compromise. If not addressed, this issue could allow unauthorized access to customer information or disrupt online transactions. Update to the latest version of e-Commerce software to fix this issue.

What to do

Update alpine arm-trusted-firmware to version 2.8.29-r0.

Affected software

Ecosystem	Vendor	Product	Affected versions
Alpine:v3.18	alpine	arm-trusted-firmware	< 2.8.29-r0 Fix: upgrade to 2.8.29-r0
Alpine:v3.19	alpine	arm-trusted-firmware	< 2.8.29-r0 Fix: upgrade to 2.8.29-r0
Alpine:v3.20	alpine	arm-trusted-firmware	< 2.8.29-r0 Fix: upgrade to 2.8.29-r0
Alpine:v3.21	alpine	arm-trusted-firmware	< 2.8.29-r0 Fix: upgrade to 2.8.29-r0

Original advisory text

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection. This issue affects e-Commer...

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection.

This issue affects e-Commerce: before 22.11.2024.

References

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker partial control

Severity

6.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-89SQL Injection

Timeline

Published22 Nov 2024

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2024-7882 · NVD

ALPINE-CVE-2024-7882 · OSV

Track software like this

Free during beta