CVE-2023-1959

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=save_category. The manipulation of the argument category leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-225346 is the identifier assigned to this vulnerability.

Score

CVSS 3.1 8.8 High

Status

Modified - cna@vuldb.com

Published

2023-04-08

Last modified

2024-11-22

Weaknesses

CWE-89

Affected products

• Online Computer And Laptop Store (Oretnom23)
• Online Computer And Laptop Store (Sourcecodester)

References

• https://github.com/boyi0508/Online-Computer-and-Laptop-Store/blob/main/SQL%20injection%20exists%20at%20the%20newly%20ad…
• https://vuldb.com/?ctiid.225346
• https://vuldb.com/?id.225346