Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Akilli Commerce Website: Blind SQL Injection via Malformed SQL

CVE-2025-11024 · published 5 months ago
Summary

Akilli Commerce's E-commerce website has a security flaw that allows attackers to manipulate database queries. This could lead to sensitive information being stolen or altered. Update to version 4.5.001 or later to fix this issue.

Original advisory text
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Blind SQL Injection. ...
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website allows Blind SQL Injection.

This issue affects E-Commerce Website: before 4.5.001.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-89SQL Injection
Timeline
Published14 May 2026
Updated4 Nov 2026
First seen14 May 2026
Sources
CVE-2025-11024 · NVD
Track software like this
Free during beta