CVE-2022-34989
CRITICAL 9.8EPSS 1.1%
Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recover_email parameter at user_password_recover.php.
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 1.09% chance of exploitation in the next 30 days, 65th percentile
- Published
- 2022-07-26
- Updated
- 2024-08-03
Proof-of-concept exploits (1)
- nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/Md-Saiful-Islam-creativesaiful/2021/Ecomm…54★ · 2026-10-09