CyberRota Analysis
AI-GeneratedA SQL injection vulnerability exists in the CodeAstro Ecommerce Website 1.0, specifically affecting the /customer/my_account.php?my_wishlist endpoint, where the delete_wishlist parameter can be manipulated. This flaw allows remote attackers to execute arbitrary SQL queries, potentially compromising the integrity and confidentiality of the database. E-commerce operators using this software should prioritize patching this vulnerability to mitigate the risk of data breaches and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in CodeAstro Ecommerce Website 1.0. Impacted is an unknown function of the file /customer/my_account.php?my_wishlist. The manipulation of the argument delete_wishlist results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.