CVE-2024-8083: SourceCodester Online Computer and Laptop Store Master.php sql injection

Published Aug 22, 2024

Updated

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /php-ocls/classes/Master.php?f=payorder. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

oretnom23 Online Computer And Laptop Store=1.0

Event History

Aug 22, 2024

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-8083?

CVE-2024-8083 has been classified as critical due to its potential to allow SQL injection.

How does CVE-2024-8083 affect SourceCodester Online Computer and Laptop Store 1.0?

CVE-2024-8083 affects the functionality of the file /php-ocls/classes/Master.php?f=pay_order by allowing manipulation of the argument id.

How do I fix CVE-2024-8083?

To fix CVE-2024-8083, validate and sanitize user inputs to prevent SQL injection vulnerabilities.

Which version of SourceCodester Online Computer and Laptop Store is affected by CVE-2024-8083?

CVE-2024-8083 specifically affects version 1.0 of SourceCodester Online Computer and Laptop Store.

What type of vulnerability is CVE-2024-8083?

CVE-2024-8083 is categorized as an SQL injection vulnerability.