CVE-2023-3534: SourceCodester Shopping Website check_availability.php sql injection

Published Jul 7, 2023

Updated

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file checkavailability.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-233286 is the identifier assigned to this vulnerability.

Affected Software

2 affected components

Shopping Website Project Shopping Website=1.0

Sanchitkmr Shopping Website=1.0

Event History

Jul 7, 2023

CVE Published

12:00 PM

Data Sourced

12:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-3534?

CVE-2023-3534 is a vulnerability found in SourceCodester Shopping Website 1.0.

What is the severity of CVE-2023-3534?

CVE-2023-3534 has a severity level of 7.5 (high).

How does CVE-2023-3534 affect SourceCodester Shopping Website?

CVE-2023-3534 affects an unknown function in the check_availability.php file of SourceCodester Shopping Website 1.0, allowing SQL injection through manipulation of the 'email' argument.

Can CVE-2023-3534 be exploited remotely?

Yes, CVE-2023-3534 can be exploited remotely.

How can I fix CVE-2023-3534?

To fix CVE-2023-3534, it is recommended to apply the latest updates provided by SourceCodester for the Shopping Website project.