CVE-2024-5894

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file manage_product.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-268138 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Online Eyewear Shop	1.0
sourcecodester	online_eyewear_shop	1.0

References

https://github.com/Hefei-Coffee/cve/blob/main/sql10.mdExploit
https://vuldb.com/?ctiid.268138Permissions Required, Third Party Advisory
https://vuldb.com/?id.268138Third Party Advisory
https://vuldb.com/?submit.354912Third Party Advisory
https://github.com/Hefei-Coffee/cve/blob/main/sql10.mdExploit
https://vuldb.com/?ctiid.268138Permissions Required, Third Party Advisory
https://vuldb.com/?id.268138Third Party Advisory
https://vuldb.com/?submit.354912Third Party Advisory

Timeline

Published: Jun 12, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-58959.8A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This CVE-2024-58969.8A vulnerability, which was classified as critical, was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected i CVE-2024-58976.1A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected b CVE-2024-58989.8A vulnerability was found in itsourcecode Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown f CVE-2024-58993.3When Bazel Plugin in intellij imports a project (either using "import project" or "Auto import") the dialog for trusting the project is not CVE-2024-59015.4The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widget in all versions up CVE-2024-59026.1The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-CVE-2024-59054.4A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows us CVE-2024-59064.8A cross-site scripting (XSS) vulnerability in Palo Alto Networks Prisma Cloud Compute software enables a malicious administrator with add/ed CVE-2024-59077.0A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute prog CVE-2024-59087.5A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalP CVE-2024-59095.5A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows us