CVE-2023-0673: SourceCodester Online Eyewear Shop sql injection
A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown functionality of the file oews/?p=products/viewproduct.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The associated identifier of this vulnerability is VDB-220195.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-0673?
CVE-2023-0673 is classified as a critical vulnerability.
How does CVE-2023-0673 affect the application?
CVE-2023-0673 affects the Online Eyewear Shop 1.0 due to SQL injection in the view_product.php file.
What versions of Online Eyewear Shop are impacted by CVE-2023-0673?
CVE-2023-0673 impacts version 1.0 of the Online Eyewear Shop.
How can I mitigate CVE-2023-0673?
Mitigation of CVE-2023-0673 can be achieved by validating and sanitizing user input to prevent SQL injection.
What should I do if I am using Online Eyewear Shop version 1.0 and CVE-2023-0673 is present?
If you are using Online Eyewear Shop version 1.0, you should implement security patches and review the code for SQL injection vulnerabilities.