CVE-2023-5374: SourceCodester Online Computer and Laptop Store products.php sql injection

Published Oct 4, 2023

Updated

A vulnerability classified as critical was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functionality of the file products.php. The manipulation of the argument c leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-241255.

Affected Software

1 affected component

oretnom23 Online Computer And Laptop Store=1.0

Event History

Oct 4, 2023

CVE Published

via MITRE·01:31 PM

Data Sourced

via MITRE·01:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-5374?

The severity of CVE-2023-5374 is critical.

What is the affected software of CVE-2023-5374?

The affected software of CVE-2023-5374 is Oretnom23 Online Computer And Laptop Store version 1.0.

How does CVE-2023-5374 impact the system?

CVE-2023-5374 allows remote attackers to launch a SQL injection attack through the manipulation of the 'c' argument in the products.php file.

Are there any references available for CVE-2023-5374?

Yes, you can find references for CVE-2023-5374 at the following links: [link1](https://github.com/llixixi/Engineers-Online-Portal-System/blob/main/Computer%20and%20Laptop%20Store%20System%20products.php%20has%20Sqlinjection.pdf), [link2](https://vuldb.com/?ctiid.241255), [link3](https://vuldb.com/?id.241255)

What is the CWE category of CVE-2023-5374?

The CWE category of CVE-2023-5374 is CWE-89 (SQL Injection).