CVE-2024-11968

5.3 mediumEPSS 0.6%

Medium (5.3) in anisha farmacia. EPSS 0.6% chance of exploitation in the next 30 days.

A vulnerability was found in code-projects Farmacia up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file pagamento.php. The manipulation of the argument notaFiscal leads to sql injection. The attack can be launched remotely.

Severity

CVSS 4.0

5.3 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWEs: CWE-89, CWE-74
Published: 2024-11-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

anisha:farmacia

References

https://code-projects.org/
https://github.com/xiaobai19198/cve/blob/main/sql-cve.md
https://vuldb.com/?ctiid.286351
https://vuldb.com/?id.286351
https://vuldb.com/?submit.452877

Check your stack JSON