SourceCodester Online Eyewear Shop 1.0 id sql injection

Una vulnerabilidad fue encontrada en SourceCodester Online Eyewear Shop 1.0 y clasificada como crítica. Una función desconocida del archivo oews/?p=products/view_product.php es afectada por esta vulnerabilidad. Mediante la manipulación del parámetro id de un input desconocido se causa una vulnerabilidad de clase sql injection. La vulnerabilidad es identificada como CVE-2023-0673. El ataque se puede efectuar a través de la red. Los detalles técnicos son conocidos. Fue declarado como proof-of-concept. Una solución posible ha sido publicada antes y no simplemente después de la publicación de la vulnerabilidad.

Campo2023-02-20 15:362023-03-05 07:452023-03-05 07:51
vendorSourceCodesterSourceCodesterSourceCodester
nameOnline Eyewear ShopOnline Eyewear ShopOnline Eyewear Shop
version1.01.01.0
fileoews/?p=products/view_product.phpoews/?p=products/view_product.phpoews/?p=products/view_product.php
argumentididid
cwe89 (sql injection)89 (sql injection)89 (sql injection)
risk222
cvss3_vuldb_avNNN
cvss3_vuldb_acHHH
cvss3_vuldb_uiNNN
cvss3_vuldb_sUUU
cvss3_vuldb_cLLL
cvss3_vuldb_iLLL
cvss3_vuldb_aLLL
cvss3_vuldb_ePPP
cvss3_vuldb_rcRRR
availability111
cveCVE-2023-0673CVE-2023-0673CVE-2023-0673
responsibleVulDBVulDBVulDB
date1675465200 (2023-02-04)1675465200 (2023-02-04)1675465200 (2023-02-04)
cvss2_vuldb_avNNN
cvss2_vuldb_acHHH
cvss2_vuldb_ciPPP
cvss2_vuldb_iiPPP
cvss2_vuldb_aiPPP
cvss2_vuldb_ePOCPOCPOC
cvss2_vuldb_rcURURUR
cvss2_vuldb_auSSS
cvss2_vuldb_rlNDNDND
cvss3_vuldb_prLLL
cvss3_vuldb_rlXXX
cvss2_vuldb_basescore4.64.64.6
cvss2_vuldb_tempscore3.93.93.9
cvss3_vuldb_basescore5.05.05.0
cvss3_vuldb_tempscore4.64.64.6
cvss3_meta_basescore6.96.97.1
cvss3_meta_tempscore6.76.77.0
price_0day$0-$5k$0-$5k$0-$5k
cvss2_researcher_aiCCC
cvss3_researcher_cHHH
cvss3_researcher_eXXX
cvss3_researcher_uiNNN
cvss3_researcher_prLLL
company_websitehttps://cyberpartners.it/https://cyberpartners.it/https://cyberpartners.it/
cvss3_researcher_aHHH
cvss3_researcher_acLLL
cvss2_researcher_eNDNDND
cvss2_researcher_avNNN
cvss2_researcher_acLLL
person_namePierfrancesco ContiPierfrancesco ContiPierfrancesco Conti
cvss3_researcher_avNNN
cvss2_researcher_ciCCC
cvss3_researcher_iHHH
company_nameCyber PartnersCyber PartnersCyber Partners
cvss3_researcher_sUUU
cvss2_researcher_auSSS
cvss2_researcher_iiCCC
cvss2_researcher_basescore9.09.09.0
cvss3_researcher_basescore8.88.88.8
person_mailsecpconti@*****.***secpconti@*****.***secpconti@*****.***
cve_assigned1675465200 (2023-02-04)1675465200 (2023-02-04)
cve_nvd_summaryA vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown functionality of the file oews/?p=products/view_product.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-220195.A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown functionality of the file oews/?p=products/view_product.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-220195.
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prN
cvss3_nvd_uiN
cvss3_nvd_sU
cvss3_nvd_cH
cvss3_nvd_iH
cvss3_nvd_aH
cvss2_nvd_avN
cvss2_nvd_acH
cvss2_nvd_auS
cvss2_nvd_ciP
cvss2_nvd_iiP
cvss2_nvd_aiP
cvss3_cna_avN
cvss3_cna_acH
cvss3_cna_prL
cvss3_cna_uiN
cvss3_cna_sU
cvss3_cna_cL
cvss3_cna_iL
cvss3_cna_aL
cve_cnaVulDB
cvss2_nvd_basescore4.6
cvss3_nvd_basescore9.8
cvss3_cna_basescore5.0

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!