i-Netsolution vulnerabilities

🔔 Create alert RSS

Published CVEs affecting i-Netsolution products: 1 record(s), with severity, exploitation and fixes.

Readymade Unilevel Ecommerce MLM 1

Exploited only (KEV) →

CVE-2024-58393 High · 8.2 CWE-89 Oct 22, 2026

i-Netsolution Readymade Unilevel Ecommerce MLM SQL Injection via product-details.php

i-Netsolution Readymade Unilevel Ecommerce MLM (2024-03-15 build) contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries through the 'id' parameter. Attackers can send GET requests to /product-details.php with boolean-based, stacked, or time-based SLEEP payloads in 'id' to extract database information. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-09-14.