CVE-2024-44652

MediumCVSS 6.5

Published: 17/11/2025(UTC)Updated: 27/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, user_lastname, and user_address parameters in user_register.php. An attacker can manipulate SQL queries during user registration.

Risk Assessment

The vulnerability could enable an attacker to access or modify database data, posing a risk to information security.

Recommendation

Update the application to a patched version or apply appropriate safeguards. Also, implement input validation and parameterized queries.

Other vulnerabilities in Kashipara Ecommerce Website

CVE-2024-44653Medium
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php. An attacker can exploit this flaw to manipulate SQL queries during login.

Original NVD description (English source)

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, user_lastname, and user_address parameters in user_register.php.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS