Description
A vulnerability, which was classified as critical, was found in SourceCodester E-Commerce System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument U_USERNAME leads to sql injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. VDB-223410 is the identifier assigned to this vulnerability.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| SourceCodester | E-Commerce System | affected |
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-23753 | A vulnerability, which was classified as critical, was found in SourceCodester E-Commerce System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument U_USERNAME leads to sql injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. VDB-223410 is the identifier assigned to this vulnerability. |
References
| Link | Providers |
|---|---|
| https://vuldb.com/?ctiid.223410 |
|
| https://vuldb.com/?id.223410 |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2024-08-02T05:49:11.644Z
Reserved: 2023-03-20T07:32:52.947Z
Link: CVE-2023-1506
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-03-20T10:15:11.543
Modified: 2024-11-21T07:39:20.157
Link: CVE-2023-1506
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses