Online Computer and Laptop Store SQL Injection Vulnerability (CNVD-2023-29389)

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero’s personal developer. Online Computer and Laptop Store v1.0 is vulnerable to a SQL injection vulnerability that originates in the file /classes/Master.php?f=save_sub_category with the parameter sub_category missing validation for external input SQL statements, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data.