CVE-2024-42404

SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the information stored in the database.

We have discovered 1,961 live websites that are affected by CVE-2024-42404.

Run a Free Instant Scan



Affected Software

Product  Welcart
Category Ecommerce
Vulnerable Domains1,961 live websites (100% of Welcart install base)
Vulnerable Versions
  • from 0 through 2.11.2
Vulnerable Versions Count0 versions ( less than 0.1% of all versions)



Details

  • Published - Sep 18, 2024
  • Updated - Sep 18, 2024

Website Distribution by Country

Number of websites using CVE-2024-42404
United States39 websites


Japan1,800 websites
Australia2 websites
Netherlands2 websites
Bulgaria1 websites
Brazil1 websites
China1 websites
Germany1 websites
Spain1 websites

Website Distribution by TLD

Number of websites using CVE-2024-42404
.com977 websites
.jp418 websites
.co.jp243 websites
.net149 websites
.org27 websites
.info25 websites
.co3 websites
.be1 websites

Websites affected by CVE-2024-42404

Top websites that are affected by CVE-2024-42404. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****************.com Japan***,***
***.**.jp Japan***,***
********.jp Japan***,***
****.org Japan***,***
******.net Japan***,***
*************.com Japan***,***
*********.com Japan*,***,***
********.jp Japan*,***,***
*******.com Japan*,***,***
*****.org Japan*,***,***
See full domain list

FAQ

A total of 1,961 websites have been identified as vulnerable to CVE-2024-42404, based on global website indexing conducted by WebTechSurvey.
The Welcart is affected by the CVE-2024-42404 vulnerability.
Welcart versions up to 2.11.2 are vulnerable to CVE-2024-42404.
CVE-2024-42404 is resolved in version 2.11.2 of Welcart.