CVE-2023-38890: SQL Injection
Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-38890.
What is the severity level of CVE-2023-38890?
The severity level of CVE-2023-38890 is high with a score of 8.8.
How does CVE-2023-38890 impact the Online Shopping Portal Project 3.1?
CVE-2023-38890 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation in the Online Shopping Portal Project 3.1.
How can I mitigate the vulnerability CVE-2023-38890?
To mitigate CVE-2023-38890, it is recommended to implement proper input validation in the username field and sanitize user-supplied input to prevent SQL injection attacks.
Is there a reference link available for CVE-2023-38890?
Yes, you can find more information about CVE-2023-38890 at the following reference link: [GitHub - akshadjoshi/CVE-2023-38890](https://github.com/akshadjoshi/CVE-2023-38890)