CVE-2023-31704

The CVE-2023-31704 entry concerns Sourcecodester Online Computer and Laptop Store 1.0, which suffers from Incorrect Access Control that enables remote attackers to elevate privileges to the administrator’s role. The Red Hat/NVD-derived collateral confirms the affected product and impact (privileg...

PT-2023-23424 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Computer and Laptop Store version 1.0 Description: The issue allows remote attackers to elevate privileges to the administrator's role due to Incorrect Access Control. Recommendations: For Sourcecodester Online Computer...

Online Computer and Laptop Store Arbitrary File Upload Vulnerability (CNVD-2023-40599)

Online Computer and Laptop Store is an online computer and laptop store. An arbitrary file upload vulnerability exists in Online Computer and Laptop Store v1.0, which stems from a failure to restrict file uploads at /classes/Users.php?f=save, and can be exploited by an attacker to cause remote co...

CVE-2023-31857

Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save...

CVE-2023-31857

Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save...

CVE-2023-31857

CVE-2023-31857 affects Sourcecodester Online Computer and Laptop Store 1.0. The vulnerability is an unrestricted file upload via the endpoint /classes/Users.php?f=save, enabling remote code execution. References and metadata consistently describe this path and the high impact (CVSS 3.1: 9.8, NET/...

CVE-2023-2661

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit ha...

CVE-2023-2661 SourceCodester Online Computer and Laptop Store Master.php sql injection

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit ha...

CVE-2023-2661

SourceCodester Online Computer and Laptop Store 1.0 is affected by CVE-2023-2661. The vulnerability resides in /classes/Master.php where manipulating the id parameter leads to an SQL injection. Exploitation can be remote, and public disclosures exist. Multiple sources (NVD CVSSv3.1 base 9.8; othe...

CVE-2023-2660

CVE-2023-2660 affects SourceCodester Online Computer and Laptop Store 1.0. A SQL injection vulnerability exists in the view_categories.php file via the c parameter, allowing remote attackers to manipulate the database. The issue’s impact is described as high confidentiality, integrity, and availa...

CVE-2023-2659

CVE-2023-2659 affects SourceCodester Online Computer and Laptop Store 1.0. The vulnerability exists in the view_product.php file, where manipulating the id parameter leads to SQL injection. It is exploitable remotely, and the public exploit is known. Multiple connected sources confirm the issue a...

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file products.php. The manipulation of the argument c leads to sql injection. The attack may be launched remotely...

CVE-2023-2658 SourceCodester Online Computer and Laptop Store products.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file products.php. The manipulation of the argument c leads to sql injection. The attack may be launched remotely...

CVE-2023-2657

The CVE-2023-2657 entry concerns SourceCodester Online Computer and Laptop Store 1.0. The vulnerability is a cross-site scripting flaw in the file products.php triggered by manipulating the search argument, allowing remote exploitation. Affected functionality is unknown but centered on the produc...

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store by the individual developer Carlo Montero. A SQL injection vulnerability exists in SourceCodester Online Computer and Laptop Store version 1.0, which stems from a problem in the file viewproduct.php, where manipulation of the...

CVE-2023-2242

The CVE-2023-2242 entry concerns SourceCodester Online Computer and Laptop Store 1.0. The vulnerability affects the GET Parameter Handler, where manipulation of the c/s parameter leads to SQL injection. It is a remotely exploitable issue and, per the CVE description, the exploit has been disclose...

CVE-2023-2242 SourceCodester Online Computer and Laptop Store GET Parameter sql injection

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component GET Parameter Handler. The manipulation of the argument c/s leads to sql injection. The attack can be...

Online Computer and Laptop Store SQL Injection Vulnerability (CNVD-2023-29381)

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to a SQL injection vulnerability in the file /classes/Master.php?f=updateorderstatus, where the parameter id of the function...

Online Computer and Laptop Store delete_order function SQL injection vulnerability

Online Computer and Laptop Store is an online computer and laptop store. An SQL injection vulnerability exists in Online Computer and Laptop Store v1.0, which originates from the function deleteorder in /classes/master.php?f=deleteorder where the parameter id of deleteorder lacks validation for...

CVE-2023-1988

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/?page=maintenance/brand. The manipulation of the argument Brand Name leads to cross site scripting. The attack ma...