| Package | Affected versions | Patched versions |
|---|---|---|
| abantecart | = 1.4.2 |
SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL commands via the tmpl_id parameter to index.php. Three techniques have been demonstrated: error-based injection using a crafted FLOOR-based payload, time-based blind injection via SLEEP(), and UNION-based injection to extract arbitrary data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free