CVE-2023-3458

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file forgot-password.php. The manipulation of the argument contact leads to sql injection. The attack can be launched remotely. The...

Sql injection

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file forgot-password.php. The manipulation of the argument contact leads to sql injection. The attack can be launched remotely. The...

CVE-2023-3458

CVE-2023-3458 affects SourceCodester Shopping Website 1.0, where the forgot-password.php forgot-password flow is vulnerable: the contact parameter manipulation enables SQL injection. This is described as a remote attack with public exploit disclosure and potential impact on confidentiality, integ...