Lucene search
PRIOn knowledge basePRION:CVE-2023-38890HistoryAug 18, 2023 - 7:15 p.m.
Sql injection
2023-08-1819:15:00
PRIOn knowledge base
www.prio-n.com
8
sql injection
online shopping portal
unauthorized access
data manipulation
insufficient validation
nvd
Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| online_shopping_portal | eq | 3.1 |
References
Related
cvelist
cvelist
CVE-2023-38890
2023-08-18 00:00:00
nvd
nvd
CVE-2023-38890
2023-08-18 19:15:12
cve
cve
CVE-2023-38890
2023-08-18 19:15:12