PT-2023-20759 · Sourcecodester · Sourcecodester Online Computer/Laptop Store
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SourceCodester Online Computer and Laptop Store version 1.0
Description
A critical vulnerability has been found in the SourceCodester Online Computer and Laptop Store, affecting the file view categories.php. The manipulation of the
c argument leads to SQL injection. The attack can be initiated remotely.Recommendations
For version 1.0, consider disabling the
view categories.php file or restricting access to it until a patch is available. Avoid using the c argument in the affected file to minimize the risk of exploitation.Exploit
Correção
XSS
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Sourcecodester Online Computer/Laptop Store