CVE-2019-25672 | pilus PilusCart 1.4.1 Comment Submission Endpoint send sql injection (Exploit 46368 / EDB-46368)

A vulnerability identified as critical has been detected in pilus PilusCart 1.4.1. Affected by this issue is some unknown functionality of the component Comment Submission Endpoint. Performing a manipulation of the argument send results in sql injection.

This vulnerability is known as CVE-2019-25672. Remote exploitation of the attack is possible. Furthermore, an exploit is available.