{"id":"CVE-2024-7882","aliases":["ALPINE-CVE-2024-7882","EUVD-2024-48865","GHSA-c9v2-gxvq-5r5v"],"status":"published","title":"SQLi in Special Minds' e-Commerce","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection.\n\nThis issue affects e-Commerce: before 22.11.2024.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00338,"percentile":0.27384,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-89"],"published":"2024-11-22T08:49:34Z","modified":"2026-11-02T11:17:50Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"arm-trusted-firmware","fixed_in":["2.8.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"arm-trusted-firmware","fixed_in":["2.8.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"arm-trusted-firmware","fixed_in":["2.8.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"arm-trusted-firmware","fixed_in":["2.8.29-r0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"arm-trusted-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"arm-trusted-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"arm-trusted-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"arm-trusted-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.29-r0"}]}]}],"products":[{"vendor":"cradle","product":"e-commerce"},{"vendor":"special minds design and software","product":"e-commerce"},{"vendor":"special_minds","product":"e-commerce"}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-24-1869","tags":["government-resource","broken-link","web"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1869","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7882"},{"url":"https://github.com/advisories/GHSA-c9v2-gxvq-5r5v"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-7882","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-7882","title":"SQLi in Special Minds' e-Commerce","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection.\n\nThis issue affects e-Commerce: before 22.11.2024.","status":"published","published":"2024-11-22T08:49:34.102Z","modified":"2026-06-02T08:25:09.682Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:34:20.673123Z"}],"euvd":[{"id":"EUVD-2024-48865","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection.\n\nThis issue affects e-Commerce: before 22.11.2024.","status":"published","published":"2024-11-22T08:49:34Z","modified":"2026-06-02T08:25:09Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:56.977213Z"}],"ghsa":[{"id":"GHSA-c9v2-gxvq-5r5v","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection.This issue affects e-Commerce: through 22.11.2024.\n\n\nNOTE: The vendor was contacted early about this disclosure but did not respond in any way.","status":"published","published":"2024-11-22T09:33:04Z","modified":"2026-06-02T09:37:16Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:08:28.702463Z"}],"nvd":[{"id":"CVE-2024-7882","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection.\n\nThis issue affects e-Commerce: before 22.11.2024.","status":"published","published":"2024-11-22T09:15:13.09Z","modified":"2026-06-17T08:21:06.52Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:10:37.996328Z"}],"osv":[{"id":"ALPINE-CVE-2024-7882","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection.\n\nThis issue affects e-Commerce: before 22.11.2024.","status":"published","published":"2024-11-22T09:15:13.09Z","modified":"2026-11-02T11:17:50.138066066Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"CVE-2024-7882","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection.This issue affects e-Commerce: before 22.11.2024.","status":"published","published":"2024-11-22T09:15:13Z","modified":"2026-04-10T05:19:43.817232Z","updated_at":"2026-11-02T15:44:45.405014Z"}]}}