Description
A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=save_product of the component Registration Handler. The manipulation of the argument email leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 4.3/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Online Eyewear Shop | 1.0 |
References
- https://github.com/foreverfeifei/cve/blob/main/user.mdExploit
- https://vuldb.com/?ctiid.303493Permissions Required, VDB Entry
- https://vuldb.com/?id.303493Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.550010Third Party Advisory, VDB Entry
- https://www.sourcecodester.com/Product
- https://github.com/foreverfeifei/cve/blob/main/user.mdExploit
Timeline
- Published
- Apr 5, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed