CVE-2023-0686

🗓️ 06 Feb 2023 18:50:20Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 54 Views🌐 WEB

Vulnerability in SourceCodester Online Eyewear Shop 1.0, allowing remote SQL injection via cart_id argument in update_cart function of HTTP POST Request Handler

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-0686	6 Feb 202322:29	–	circl
CNNVD	Online Eyewear Shop SQL注入漏洞	6 Feb 202300:00	–	cnnvd
Cvelist	CVE-2023-0686 SourceCodester Online Eyewear Shop HTTP POST Request update_cart sql injection	6 Feb 202318:50	–	cvelist
EUVD	EUVD-2023-12715	3 Oct 202520:07	–	euvd
NVD	CVE-2023-0686	6 Feb 202320:15	–	nvd
OSV	CVE-2023-0686	6 Feb 202320:15	–	osv
Prion	Sql injection	6 Feb 202320:15	–	prion
Positive Technologies	PT-2023-16455 · Sourcecodester · Sourcecodester Online Eyewear Shop	6 Feb 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-0686	23 May 202502:55	–	redhatcve
Vulnrichment	CVE-2023-0686 SourceCodester Online Eyewear Shop HTTP POST Request update_cart sql injection	6 Feb 202318:50	–	vulnrichment

NVD

Vulners

Node

oretnom23 online_eyewear_shopMatch1.0

[
  {
    "vendor": "SourceCodester",
    "product": "Online Eyewear Shop",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
cart_id	request body	/oews/classes/Master.php?f=update_cart	SQL injection vulnerability in update_cart via POST parameter cart_id	CWE-89

17 Jun 2026 05:26Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.15 - 9.8

CVSS 24.6

CVSS 35

EPSS0.00552

SSVC

CWE-89