CVE-2024-5894: SourceCodester Online Eyewear Shop manage_product.php sql injection
Published Jun 12, 2024
·Updated
A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file manageproduct.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-268138 is the identifier assigned to this vulnerability.
Affected Software
1 affected component
oretnom23 Online Eyewear Shop=1.0
Event History
Jun 12, 2024
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-5894?
CVE-2024-5894 is classified as a critical vulnerability.
2
How does CVE-2024-5894 affect the Online Eyewear Shop application?
CVE-2024-5894 allows for SQL injection through the manipulation of the argument id in manage_product.php.
3
Can CVE-2024-5894 be exploited remotely?
Yes, CVE-2024-5894 can be exploited remotely.
4
What software version is affected by CVE-2024-5894?
CVE-2024-5894 affects version 1.0 of the SourceCodester Online Eyewear Shop.
5
What type of vulnerability is CVE-2024-5894?
CVE-2024-5894 is a SQL injection vulnerability.