Pierfrancesco Conti

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Eyewear Shop version 1.0 **Description** A vulnerability has been found in the function registration of the file oews/classes/Users.php of the component POST Request Handler. The manipulation of the arguments `firstname`, `middlename`, `lastname`, `email`, and `contact` leads to cross-site scripting. The attack can be launched remotely. **Recommendations** For SourceCodester Online Eyewear Shop version 1.0, as a temporary workaround, consider validating and sanitizing the `firstname`, `middlename`, `lastname`, `email`, and `contact` arguments in the registration function to prevent cross-site scripting attacks. Restrict access to the vulnerable `Users.php` file until a patch is available.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Eyewear Shop version 1.0 **Description** A critical issue has been found, affecting the function `update cart` of the file `/oews/classes/Master.php?f=update cart` in the HTTP POST Request Handler component. The manipulation of the `cart id` argument leads to SQL injection, allowing for remote attacks. The complexity of an attack is rather high, and the exploitability is told to be difficult. **Recommendations** For SourceCodester Online Eyewear Shop version 1.0, consider disabling the `update cart` function until a patch is available. Restrict access to the `/oews/classes/Master.php?f=update cart` endpoint to minimize the risk of exploitation. Avoid using the `cart id` argument in the affected HTTP POST Request Handler until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Eyewear Shop version 1.0 **Description** A critical vulnerability was found in the software, affecting an unknown functionality of the file oews/products/view product.php. The manipulation of the `id` argument leads to SQL injection. The attack can be launched remotely. The complexity of an attack is rather high, and the exploitation appears to be difficult. **Recommendations** For version 1.0, consider disabling the `id` argument in the affected file oews/products/view product.php as a temporary workaround until a patch is available. Restrict access to the vulnerable file to minimize the risk of exploitation. Avoid using the `id` argument in the affected API endpoint until the issue is resolved.