CVE-2023-2658: SourceCodester Online Computer and Laptop Store products.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file products.php. The manipulation of the argument c leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228800.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-2658?
CVE-2023-2658 is a vulnerability found in SourceCodester Online Computer and Laptop Store 1.0, classified as critical.
What is the severity of CVE-2023-2658?
The severity of CVE-2023-2658 is 9.8 (critical).
How does CVE-2023-2658 affect SourceCodester Online Computer and Laptop Store 1.0?
CVE-2023-2658 allows SQL injection through the manipulation of the 'c' argument in the 'products.php' file, potentially enabling remote attackers to launch an attack.
How can I fix CVE-2023-2658?
To fix CVE-2023-2658, it is recommended to apply the latest patches or updates provided by the vendor of SourceCodester Online Computer and Laptop Store 1.0.
Where can I find more information about CVE-2023-2658?
You can find more information about CVE-2023-2658 at the following references: [Reference 1](https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Online-Computer-and-Laptop-Store---Multiple-vulnerabilities.md#2sql-injection-vulnerability-in-productsphp), [Reference 2](https://vuldb.com/?ctiid.228800), [Reference 3](https://vuldb.com/?id.228800).