CVE-2023-1951: SourceCodester Online Computer and Laptop Store brand.php delete_brand sql injection

Published Apr 8, 2023

Updated

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this issue is the function deletebrand of the file /admin/maintenance/brand.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-225338 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

oretnom23 Online Computer And Laptop Store=1.0

Event History

Apr 8, 2023

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2023-1951.

What is the severity of CVE-2023-1951?

The severity of CVE-2023-1951 is critical.

Which software versions are affected by CVE-2023-1951?

The affected software version is Oretnom23 Online Computer And Laptop Store 1.0.

What is the CWE classification for CVE-2023-1951?

The CWE classification for CVE-2023-1951 is CWE-89.

How can I fix the SQL injection vulnerability in SourceCodester Online Computer and Laptop Store 1.0?

To fix the SQL injection vulnerability, ensure that user input is properly sanitized and use prepared statements or parameterized queries when interacting with the database.