CVE-2025-4173: SourceCodester Online Eyewear Shop Master.php delete_cart sql injection
A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is the function deletecart of the file /oews/classes/Master.php?f=deletecart. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4173?
CVE-2025-4173 is classified as critical due to its potential for SQL injection vulnerabilities.
How do I fix CVE-2025-4173?
To fix CVE-2025-4173, validate and sanitize the input for the 'ID' argument in the delete_cart function to prevent SQL injection.
What software is affected by CVE-2025-4173?
CVE-2025-4173 affects the SourceCodester Online Eyewear Shop version 1.0.
What type of vulnerability is CVE-2025-4173?
CVE-2025-4173 is an SQL injection vulnerability found in the delete_cart function.
What could an attacker do with CVE-2025-4173?
An attacker exploiting CVE-2025-4173 could manipulate the argument ID to execute unauthorized SQL commands.