PT-2025-3762 · Unknown · Sourcecodester Online Eyewear Shop
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
SourceCodester Online Eyewear Shop version 1.0
Description
A critical issue affects some unknown functionality of the file /orders/view order.php. The manipulation of the
id argument leads to SQL injection. The attack may be launched remotely.Recommendations
For SourceCodester Online Eyewear Shop version 1.0, as a temporary workaround, consider restricting access to the /orders/view order.php file until a patch is available. Avoid using the
id argument in the affected file to minimize the risk of exploitation.Exploit
Fix
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Sourcecodester Online Eyewear Shop