CVE-2023-26905: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection that can directly issue instructions to the background database system via /alphaware/details.php?id...

CVE-2020-25362: Improper Neutralization of Special Elements used in an SQL Command

The id paramater in Online Shopping Alphaware 1.0 has been discovered to be vulnerable to an Error-Based blind SQL injection in the /alphaware/details.php path. This allows an attacker to retrieve all databases...

PT-2021-3914

Name of the Vulnerable Software and Affected Versions Online Shopping Alphaware version 1.0 Description The issue is related to the id parameter in the web application, which is vulnerable to an Error-Based blind SQL injection. This vulnerability allows an attacker to execute arbitrary SQL comman...