CVE-2023-1957: SourceCodester Online Computer and Laptop Store Subcategory sql injection

Published Apr 8, 2023

Updated

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=savesubcategory of the component Subcategory Handler. The manipulation of the argument subcategory leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225344.

Affected Software

1 affected component

oretnom23 Online Computer And Laptop Store=1.0

Event History

Apr 8, 2023

CVE Published

via MITRE·10:31 AM

Data Sourced

via MITRE·10:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-1957?

CVE-2023-1957 is a critical vulnerability found in SourceCodester Online Computer and Laptop Store 1.0.

What is the severity of CVE-2023-1957?

CVE-2023-1957 is classified as high severity with a CVSS score of 8.8.

Which component of SourceCodester Online Computer and Laptop Store is affected by CVE-2023-1957?

The component affected by CVE-2023-1957 is the Subcategory Handler.

What is the vulnerability description of CVE-2023-1957?

CVE-2023-1957 is a SQL injection vulnerability that exists in the newly added subcategory list functionality of SourceCodester Online Computer and Laptop Store 1.0.

How can I fix CVE-2023-1957?

To fix CVE-2023-1957, apply the latest security patch or update provided by the software vendor, and sanitize and validate user input to prevent SQL injection attacks.