CVE-2024-12794 | Codezips E-Commerce Site 1.0 /admin/editorder.php dstatus/quantity/ddate sql injection

A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0. This affects an unknown part of the file /admin/editorder.php. The manipulation of the argument dstatus/quantity/ddate leads to sql injection.

This vulnerability is uniquely identified as CVE-2024-12794. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.