CVE-2023-2659: SourceCodester Online Computer and Laptop Store view_product.php sql injection

Published May 11, 2023

Updated

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file viewproduct.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228801 was assigned to this vulnerability.

Affected Software

1 affected component

oretnom23 Online Computer And Laptop Store=1.0

Event History

May 11, 2023

CVE Published

02:31 PM

Data Sourced

02:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-2659?

CVE-2023-2659 is a critical vulnerability found in SourceCodester Online Computer and Laptop Store 1.0 that allows for remote SQL injection attacks.

How severe is CVE-2023-2659?

CVE-2023-2659 has a severity score of 9.8, indicating a critical vulnerability.

How does CVE-2023-2659 affect SourceCodester Online Computer and Laptop Store 1.0?

CVE-2023-2659 affects an unknown part of the file view_product.php, allowing for SQL injection attacks.

How can an attacker exploit CVE-2023-2659?

An attacker can exploit CVE-2023-2659 remotely by manipulating the 'id' argument to initiate SQL injection attacks.

Is there a fix for CVE-2023-2659?

To fix CVE-2023-2659, it is recommended to implement proper input validation and sanitization to prevent SQL injection attacks.