CVE-2024-44653

MediumCVSS 6.5

Published: 17/11/2025(UTC)Updated: 27/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php. An attacker can exploit this flaw to manipulate SQL queries during login.

Risk Assessment

This could lead to unauthorized access to user accounts or the database, threatening data confidentiality and integrity.

Recommendation

Update the application to the latest version or apply security patches. Also, use parameterized queries and input validation.

Other vulnerabilities in Kashipara Ecommerce Website

CVE-2024-44652Medium
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, user_lastname, and user_address parameters in user_register.php. An attacker can manipulate SQL queries during user registration.

Original NVD description (English source)

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS