Description
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file view_category.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 7.5/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Online Eyewear Shop | 1.0 |
| sourcecodester | online_eyewear_shop | 1.0 |
References
- https://github.com/41lai/cve/blob/main/sql.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.278251Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.278251Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.411564Third Party Advisory, VDB Entry
- https://www.sourcecodester.com/Product
Timeline
- Published
- Sep 22, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed