CVE-2023-1987: SourceCodester Online Computer and Laptop Store update_order_status sql injection

Published Apr 11, 2023

Updated

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is the function updateorderstatus of the file /classes/Master.php?f=updateorderstatus. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225535.

Affected Software

1 affected component

oretnom23 Online Computer And Laptop Store=1.0

Event History

Apr 11, 2023

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-1987?

The severity of CVE-2023-1987 is classified as high, with a severity value of 7.2.

What is the affected software of CVE-2023-1987?

The affected software of CVE-2023-1987 is SourceCodester Online Computer and Laptop Store 1.0.

What is the CWE category of CVE-2023-1987?

The CWE category of CVE-2023-1987 is CWE-89 (SQL Injection).

How can the vulnerability in CVE-2023-1987 be exploited?

The vulnerability in CVE-2023-1987 can be exploited through SQL injection by manipulating the 'id' argument in the 'update_order_status' function of the '/classes/Master.php?f=update_order_status' file.

Is there a fix available for CVE-2023-1987?

Currently, there is no information available about a fix for CVE-2023-1987. It is recommended to follow the provided references for any updates or patches.