Skip to content
Threat Feed
Subscribe

Product

ReadyEcommerce (< 4.5.2)

1 brief RSS
critical advisory

Unauthenticated SQL Injection in ReadyEcommerce Product API

ReadyEcommerce versions before 4.5.2 are vulnerable to unauthenticated time-based blind SQL injection in the product listing API, allowing attackers to exfiltrate database contents and potentially gain system-level access.

ReadyEcommerce
1r 1t 1c