PT-2023-20759 · Sourcecodester · Sourcecodester Online Computer/Laptop Store
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SourceCodester Online Computer and Laptop Store version 1.0
Description
A critical vulnerability has been found in the SourceCodester Online Computer and Laptop Store, affecting the file view categories.php. The manipulation of the
c argument leads to SQL injection. The attack can be initiated remotely.Recommendations
For version 1.0, consider disabling the
view categories.php file or restricting access to it until a patch is available. Avoid using the c argument in the affected file to minimize the risk of exploitation.Exploit
Fix
XSS
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Sourcecodester Online Computer/Laptop Store