Skip to content
OpenAdvisories
Medium · 5.0 CVE-2023-0673 EUVD-2023-12703GHSA-x4xq-q49r-j29g

SourceCodester Online Eyewear Shop sql injection

Published Feb 4, 2023 · Updated Aug 2, 2024 · Assigned by VulDB

Description

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown functionality of the file oews/?p=products/view_product.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The associated identifier of this vulnerability is VDB-220195.

Affected products

VendorProductAffectedFixed
SourceCodester Online Eyewear Shop 1.0 —

References