CVE-2023-3457: SourceCodester Shopping Website index.php sql injection

Published Jun 29, 2023

Updated

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-232674 is the identifier assigned to this vulnerability.

Affected Software

2 affected components

Sanchitkmr Shopping Website=1.0

Shopping Website Project Shopping Website=1.0

Event History

Jun 29, 2023

CVE Published

01:31 PM

Data Sourced

01:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-3457?

CVE-2023-3457 is classified as a critical vulnerability.

How does CVE-2023-3457 impact the system?

CVE-2023-3457 allows for SQL injection through manipulation of the username argument in the index.php file.

Who is affected by CVE-2023-3457?

CVE-2023-3457 affects users of SourceCodester Shopping Website version 1.0.

Can CVE-2023-3457 be exploited remotely?

Yes, CVE-2023-3457 can be exploited remotely.

What steps should be taken to mitigate CVE-2023-3457?

To mitigate CVE-2023-3457, it is recommended to sanitize input and implement prepared statements to prevent SQL injection.