CVE-2023-38890: SQL Injection
First published: Fri Aug 18 2023(Updated: )
Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Online Shopping Portal Project Online Shopping Portal | =3.1 | |
| PHPGurukul Online Shopping Portal | =3.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-38890.
What is the severity level of CVE-2023-38890?
The severity level of CVE-2023-38890 is high with a score of 8.8.
How does CVE-2023-38890 impact the Online Shopping Portal Project 3.1?
CVE-2023-38890 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation in the Online Shopping Portal Project 3.1.
How can I mitigate the vulnerability CVE-2023-38890?
To mitigate CVE-2023-38890, it is recommended to implement proper input validation in the username field and sanitize user-supplied input to prevent SQL injection attacks.
Is there a reference link available for CVE-2023-38890?
Yes, you can find more information about CVE-2023-38890 at the following reference link: [GitHub - akshadjoshi/CVE-2023-38890](https://github.com/akshadjoshi/CVE-2023-38890)
- collector/nvd-index
- collector/nvd-api
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/online shopping portal project
- canonical/online shopping portal project online shopping portal
- version/online shopping portal project online shopping portal/3.1
- vendor/phpgurukul
- canonical/phpgurukul online shopping portal
- version/phpgurukul online shopping portal/3.1