Threats tagged 'ghsa-hp4h-f734-26p3'

Kashipara Ecommerce Website version 1.0 has a SQL Injection vulnerability affecting multiple input parameters including user_email, username, user_firstname, user_lastname, and user_address in the user_register.php script. This flaw allows an attacker to inject malicious SQL code, potentially leading to unauthorized data access or modification. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. No patch or remediation information is currently available.