CVE-2023-3534

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file check_availability.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-233286 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jul 7, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-353407.8Windows CNG Key Isolation Service Elevation of Privilege VulnerabilityCVE-2023-353415.5Microsoft DirectMusic Information Disclosure VulnerabilityCVE-2023-353427.8Windows Image Acquisition Elevation of Privilege VulnerabilityCVE-2023-353437.8Windows Geolocation Service Remote Code Execution VulnerabilityCVE-2023-353446.6Windows DNS Server Remote Code Execution VulnerabilityCVE-2023-353456.6Windows DNS Server Remote Code Execution VulnerabilityCVE-2023-353466.6Windows DNS Server Remote Code Execution VulnerabilityCVE-2023-353477.1Microsoft Install Service Elevation of Privilege VulnerabilityCVE-2023-353486.5Active Directory Federation Service Security Feature Bypass VulnerabilityCVE-2023-353499.8Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2023-35356.1A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an CVE-2023-353507.2Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
CVE-2023-3534: High severity, CVSS 7.5 | Vulnix