CVE-2023-2658: SourceCodester Online Computer and Laptop Store products.php sql injection
First published: Thu May 11 2023(Updated: )
A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file products.php. The manipulation of the argument c leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228800.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Online Computer And Laptop Store | =1.0 | |
| =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-2658?
CVE-2023-2658 is a vulnerability found in SourceCodester Online Computer and Laptop Store 1.0, classified as critical.
What is the severity of CVE-2023-2658?
The severity of CVE-2023-2658 is 9.8 (critical).
How does CVE-2023-2658 affect SourceCodester Online Computer and Laptop Store 1.0?
CVE-2023-2658 allows SQL injection through the manipulation of the 'c' argument in the 'products.php' file, potentially enabling remote attackers to launch an attack.
How can I fix CVE-2023-2658?
To fix CVE-2023-2658, it is recommended to apply the latest patches or updates provided by the vendor of SourceCodester Online Computer and Laptop Store 1.0.
Where can I find more information about CVE-2023-2658?
You can find more information about CVE-2023-2658 at the following references: [Reference 1](https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Online-Computer-and-Laptop-Store---Multiple-vulnerabilities.md#2sql-injection-vulnerability-in-productsphp), [Reference 2](https://vuldb.com/?ctiid.228800), [Reference 3](https://vuldb.com/?id.228800).
- collector/nvd-index
- agent/author
- agent/type
- agent/first-publish-date
- agent/title
- agent/severity
- agent/weakness
- agent/references
- agent/softwarecombine
- agent/description
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/oretnom23
- canonical/oretnom23 online computer and laptop store
- version/oretnom23 online computer and laptop store/1.0