CVE-2024-58393
waiting for further signalsZero needs more public information before it can validate it.GHSA-83x3-gcgq-gcgq ↗EUVD-2024-55820 ↗
description
The 2024-03-15 build of i-Netsolution Readymade Unilevel Ecommerce MLM is affected by SQL injection in the id input handled by product-details.php. An unauthenticated remote attacker may alter database queries and obtain database information by reaching that endpoint.
mitigation
Restrict public access to product-details.php where possible, and enforce strict numeric validation for the id parameter at the application or reverse-proxy layer. Apply vendor-provided fixes when available; no fixed version is recorded in the advisory data.
outcome
Contextual: an exploit technique exists, but no deterministic check could cover this one.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-22vulncheck_kev: trigger signal, started the run
- 2026-10-22 00:00Z
- 2026-10-22 10:57Zcve.org record for CVE-2024-58393
this entry in the feed
GET /api/v1/feed/CVE-2024-58393
{ "etk_id": "ETK-2026-2454", "cve_id": "CVE-2024-58393", "display_id": "CVE-2024-58393", "ghsa_id": "GHSA-83x3-gcgq-gcgq", "euvd_id": "EUVD-2024-55820", "status": "published", "anchor_state": "anchored", "title": "SQL injection in i-Netsolution Unilevel Ecommerce MLM", "summary": "The 2024-03-15 build of i-Netsolution Readymade Unilevel Ecommerce MLM is affected by SQL injection in the id input handled by product-details.php. An unauthenticated remote attacker may alter database queries and obtain database information by reaching that endpoint.", "mitigation": "Restrict public access to product-details.php where possible, and enforce strict numeric validation for the id parameter at the application or reverse-proxy layer. Apply vendor-provided fixes when available; no fixed version is recorded in the advisory data.", "vendor": "i-Netsolution", "product": "Readymade Unilevel Ecommerce MLM", "affected": [ { "affected_notes": [ "2024-03-15 build" ], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "Readymade Unilevel Ecommerce MLM", "purl": null } ], "cwes": null, "cvss_score": 8.8, "cvss_src": "other", "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N", "epss_score": null, "epss_percentile": null, "epss_asof": null, "automation": "contextual", "check": false, "check_confidence_basis": null, "exploit": false, "pipeline_minutes": 18.182715783333332, "t0_at": "2026-10-22T10:57:36.699000+00:00", "signals": { "kev": { "at": "2026-10-22T00:00:00+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-22T10:57:36.699000+00:00", "precision": "day", "url": "https://vulncheck.com/cve/CVE-2024-58393" }, "trigger_signal": { "at": "2026-10-22T00:00:00+00:00", "days": -0.4566747569444444, "is_lower_bound": false, "measured_at": "2026-10-22T10:57:36.699000+00:00", "url": "https://vulncheck.com/cve/CVE-2024-58393" } } }
published 2026-10-22 15:03Z
last change 2026-10-22 16:48Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.