Online Computer and Laptop Store SQL Injection Vulnerability (CNVD-2023-29386)

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero’s personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the file /admin/product/manage.php, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data.