Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-29385
HistoryApr 11, 2023 - 12:00 a.m.

Online Computer and Laptop Store SQL Injection Vulnerability (CNVD-2023-29385)

2023-04-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
online store
sql injection
validation
email parameter
illegal sql commands
sensitive data
database

0.001 Low

EPSS

Percentile

48.9%

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero’s personal developer. Online Computer and Laptop Store v1.0 is vulnerable to a SQL injection vulnerability, which stems from the lack of validation of external input SQL statements in the parameter email of the file login.php, and can be exploited by attackers to execute illegal SQL commands to steal sensitive database data.

0.001 Low

EPSS

Percentile

48.9%

Related for CNVD-2023-29385