Sql injection

2023-04-2217:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

sourcecodester online eyewear shop

remote attack

sql injection

get parameter handler

nvd

critical

vdb-227229

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.3%

JSON

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/update_status.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227229 was assigned to this vulnerability.

CPENameOperatorVersion
online_eyewear_shopeq1.0

CPE	Name	Operator	Version
	online_eyewear_shop	eq	1.0

References

github.com/T4y1oR/bug_report/blob/main/SQLi-1.md

vuldb.com/?ctiid.227229

vuldb.com/?id.227229