CVE-2024-58393 i-Netsolution Readymade Unilevel Ecommerce MLM SQL Injection via product-details.php
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2024-58393?
CVE-2024-58393 is a high-severity vulnerability in i-Netsolution Readymade Unilevel Ecommerce MLM, published on 22 Oct 2026.
Official description
i-Netsolution Readymade Unilevel Ecommerce MLM (2024-03-15 build) contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries through the 'id' parameter. Attackers can send GET requests to /product-details.php with boolean-based, stacked, or time-based SLEEP payloads in 'id' to extract database information. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-09-14.
Weakness: CWE-89
Which versions are affected by CVE-2024-58393?
How do I fix CVE-2024-58393?
No fix has been published for CVE-2024-58393 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-58393 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-58393 exists.
Sources
Also known as GHSA-83x3-gcgq-gcgq.