CVE-2023-3534

SourceCodester Shopping Website 1.0 contains a SQL injection in the check_availability.php file, triggered by manipulating the email parameter. This vulnerability allows remote exploitation and has publicly disclosed exploits. Affected component: the function in check_availability.php; root cause...

Out-of-bounds

A vulnerability has been found in SourceCodester Shopping Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been...

CVE-2023-3503

CVE-2023-3503 concerns SourceCodester Shopping Website 1.0. The vulnerability is in the file insert-product.php, where an input allows an unrestricted file upload, enabling a remote attacker to upload arbitrary files. Exploitation details consistently reported across multiple connected sources: t...

CVE-2023-3502

The CVE-2023-3502 entry concerns the SourceCodester Shopping Website 1.0. A vulnerability exists in an unknown function within search-result.php where manipulating the product argument leads to SQL injection. This can be exploited remotely and is publicly disclosed (VDB-232950). Affected software...

CVE-2023-3457

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2023-3458

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file forgot-password.php. The manipulation of the argument contact leads to sql injection. The attack can be launched remotely. The...