CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UkrSolution Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce.This issue affects Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce: from n/a through 1.5.1.
Explanation of Vulnerability in Simple Terms
Simple Inventory Management for WooCommerce versions up to 1.5.1 contain a SQL injection vulnerability in database queries. An attacker can craft malicious input to extract sensitive data from the site's database, including customer information and order details. No authentication is required. The vulnerability also impacts site availability.
What an attacker can do
Extract sensitive data from the site database, including customer and order information.
Potential impact on your site
Customer data, order records, and other database contents can be read or deleted by remote attackers.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
