CVE-2024-50970: Nikoarroyocuraza Online Furniture Shopping Project

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

• Nikoarroyocuraza Online Furniture Shopping Project: version 1.0 only

Published 2024-11-13. Last modified 2026-06-17.