CVE-2023-0673: SourceCodester Online Eyewear Shop sql injection
First published: Sat Feb 04 2023(Updated: )
A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown functionality of the file oews/?p=products/view_product.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The associated identifier of this vulnerability is VDB-220195.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Online Eyewear Shop | =1.0 | |
| SourceCodester Online Eyewear Shop | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-0673?
CVE-2023-0673 is classified as a critical vulnerability.
How does CVE-2023-0673 affect the application?
CVE-2023-0673 affects the Online Eyewear Shop 1.0 due to SQL injection in the view_product.php file.
What versions of Online Eyewear Shop are impacted by CVE-2023-0673?
CVE-2023-0673 impacts version 1.0 of the Online Eyewear Shop.
How can I mitigate CVE-2023-0673?
Mitigation of CVE-2023-0673 can be achieved by validating and sanitizing user input to prevent SQL injection.
What should I do if I am using Online Eyewear Shop version 1.0 and CVE-2023-0673 is present?
If you are using Online Eyewear Shop version 1.0, you should implement security patches and review the code for SQL injection vulnerabilities.
- agent/author
- agent/references
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/title
- agent/severity
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/oretnom23
- canonical/sourcecodester online eyewear shop
- version/sourcecodester online eyewear shop/1.0
- vendor/online eyewear shop project