CVE-2023-2660

CVE-2023-2660 affects SourceCodester Online Computer and Laptop Store 1.0. A SQL injection vulnerability exists in the view_categories.php file via the c parameter, allowing remote attackers to manipulate the database. The issue’s impact is described as high confidentiality, integrity, and availa...

CVE-2023-2658

CVE-2023-2658 affects SourceCodester Online Computer and Laptop Store 1.0, with SQL injection in products.php via the c parameter. Affects unknown functionality; exploit could be remotely launched and has been publicly disclosed. Documents indicate a workaround: restrict access to products.php an...

CVE-2023-1988

CVE-2023-1988 affects SourceCodester Online Computer and Laptop Store v1.0. The vulnerability is a cross-site scripting (XSS) issue in the /admin/?page=maintenance/brand function where the Brand Name argument is not properly validated/escaped, enabling an attacker to inject arbitrary script. Expl...

CVE-2023-1958

CVE-2023-1958 concerns a SQL injection in SourceCodester Online Computer and Laptop Store 1.0, affecting an unknown part of /classes/Master.php?f=delete_sub_category where the id parameter is manipulated to execute arbitrary SQL. A remote attacker could exploit this vulnerability, and public disc...

CVE-2023-1987

CVE-2023-1987 affects SourceCodester Online Computer and Laptop Store v1.0. The vulnerability resides in the update_order_status functionality (file /classes/Master.php?f=update_order_status) where the id parameter is not properly validated, enabling SQL injection. Exploitation can be performed r...

CVE-2023-1953

CVE-2023-1953 affects SourceCodester Online Computer and Laptop Store v1.0. The vulnerable component is the /admin/sales/index.php file, where manipulating the date_start/date_end parameters enables SQL injection. Documents indicate remote attack feasibility and a critical severity. Connected sou...

CVE-2023-1957

CVE-2023-1957 affects SourceCodester Online Computer and Laptop Store v1.0. The SQL injection is triggered via the sub_category parameter in /classes/Master.php?f=save_sub_category (Subcategory Handler). Several sources describe remote exploitation, with high-severity impact on confidentiality, i...

CVE-2023-1986

The CVE-2023-1986 entry documents an SQL injection affecting SourceCodester Online Computer and Laptop Store 1.0, specifically in the function delete_order in /classes/master.php?f=delete_order. The vulnerability arises from lack of validation/sanitization of the id parameter, enabling remote exp...

CVE-2023-1959

CVE-2023-1959 affects SourceCodester Online Computer and Laptop Store 1.0. The flaw is an SQL injection in the code path /classes/Master.php?f=save_category, triggered by the unsanitized category parameter. This enables remote attackers to manipulate SQL and potentially access data. The vulnerabi...

CVE-2023-1955

CVE-2023-1955 affects SourceCodester Online Computer and Laptop Store 1.0, specifically the login.php file under the User Registration component. The vulnerability is a SQL injection caused by unsafely handling the email parameter in an unknown function, enabling remote exploitation. Public explo...

CVE-2023-1985

SourceCodester Online Computer and Laptop Store 1.0 is affected by CVE-2023-1985, a SQL injection in the function save_brand (/classes/Master.php?f=save_brand) caused by manipulating the name parameter. The issue can be exploited remotely and has publicly disclosed exploit information. Multiple s...

CVE-2023-1952

The CVE-2023-1952 entry concerns SourceCodester Online Computer and Laptop Store 1.0 where the Product Search component’s /?p=products endpoint accepts a search parameter that is vulnerable to SQL injection. The vulnerability allows remote exploitation and has publicly disclosed exploit details; ...

CVE-2023-1826

CVE-2023-1826 concerns SourceCodester Online Computer and Laptop Store 1.0. The vulnerability affects an unknown portion of php-ocls\admin\system_info\index.php where the attacker can manipulate the non-sanitized img parameter to upload arbitrary files, enabling remote code execution. Public writ...

CVE-2023-1951

CVE-2023-1951 affects SourceCodester Online Computer and Laptop Store 1.0. The SQL injection stems from the delete_brand function in /admin/maintenance/brand.php, via manipulation of the id parameter. The issue can be exploited remotely; exploitation has been disclosed publicly, with VDB-225338 a...

CVE-2023-1956

CVE-2023-1956 concerns a path traversal in SourceCodester Online Computer and Laptop Store 1.0, specifically in the Image Handler’s file /classes/Master.php?f=delete_img. Multiple connected sources confirm remote exploitation potential and public disclosure, with the vulnerability arising from un...

CVE-2023-1954

The CVE-2023-1954 entry relates to SourceCodester Online Computer and Laptop Store 1.0. A critical flaw in the function save_inventory in /admin/product/manage.php allows manipulation of the id parameter to trigger SQL injection. The vulnerability is remote-accessible, and public exploits have be...

CVE-2023-1960

SourceCodester Online Computer and Laptop Store 1.0 is affected by CVE-2023-1960 via SQL injection in /classes/Master.php?f=delete_category (id parameter). The issue allows remote exploitation and is classified as critical; exploit information has been disclosed publicly. Multiple sources confirm...

CVE-2024-4820

CVE-2024-4820 affects SourceCodester Online Computer and Laptop Store 1.0. The vulnerability resides in the file /classes/SystemSettings.php?f=update_settings, allowing unrestricted (remote) upload. This has been publicly disclosed and is classified as high severity by NVD/CNA sources, with pract...

CVE-2023-1961

CVE-2023-1961 affects SourceCodester Online Computer and Laptop Store 1.0. The vulnerability is a cross-site scripting flaw in the unknown function behind the endpoint /admin/?page=system_info, triggered by manipulating the System Name parameter. It can be exploited remotely, and the exploit has ...

CVE-2023-31857

CVE-2023-31857 affects Sourcecodester Online Computer and Laptop Store 1.0. The vulnerability is an unrestricted file upload via the endpoint /classes/Users.php?f=save, enabling remote code execution. References and metadata consistently describe this path and the high impact (CVSS 3.1: 9.8, NET/...

CVE-2023-5373

SourceCodester Online Computer and Laptop Store 1.0 is affected. The vulnerability lies in the register function of Master.php, where manipulating the email parameter enables SQL injection. The issue can be exploited remotely and, per multiple sources, has a publicly disclosed exploit. Reported C...

CVE-2023-1857

CVE-2023-1857 impacts SourceCodester Online Computer and Laptop Store 1.0. The vulnerability is a cross-site scripting flaw in the admin file for managing products, specifically /admin/?page=product/manage_product&id=2, where manipulating the Product Name parameter (due to insufficient input filt...

CVE-2023-2242

The CVE-2023-2242 entry concerns SourceCodester Online Computer and Laptop Store 1.0. The vulnerability affects the GET Parameter Handler, where manipulation of the c/s parameter leads to SQL injection. It is a remotely exploitable issue and, per the CVE description, the exploit has been disclose...

CVE-2023-2659

CVE-2023-2659 affects SourceCodester Online Computer and Laptop Store 1.0. The vulnerability exists in the view_product.php file, where manipulating the id parameter leads to SQL injection. It is exploitable remotely, and the public exploit is known. Multiple connected sources confirm the issue a...

CVE-2023-2661

SourceCodester Online Computer and Laptop Store 1.0 is affected by CVE-2023-2661. The vulnerability resides in /classes/Master.php where manipulating the id parameter leads to an SQL injection. Exploitation can be remote, and public disclosures exist. Multiple sources (NVD CVSSv3.1 base 9.8; othe...

CVE-2024-8084

CVE-2024-8084 affects SourceCodester Online Computer and Laptop Store 1.0. The vulnerability resides in the Setting Handler’s SystemSettings.php?f=update_settings, where the System Name parameter can be manipulated to trigger cross-site scripting. The issue is exploitable remotely and exploits ha...

CVE-2023-31704

The CVE-2023-31704 entry concerns Sourcecodester Online Computer and Laptop Store 1.0, which suffers from Incorrect Access Control that enables remote attackers to elevate privileges to the administrator’s role. The Red Hat/NVD-derived collateral confirms the affected product and impact (privileg...

CVE-2023-1942

CVE-2023-1942 affects SourceCodester Online Computer and Laptop Store 1.0. The Avatar Handler’s /admin/?page=user functionality is vulnerable to unrestricted file uploads, enabling remote exploitation. Documents indicate an attacker can upload arbitrary files to execute code, with the vulnerabili...

CVE-2023-2657

The CVE-2023-2657 entry concerns SourceCodester Online Computer and Laptop Store 1.0. The vulnerability is a cross-site scripting flaw in the file products.php triggered by manipulating the search argument, allowing remote exploitation. Affected functionality is unknown but centered on the produc...

CVE-2023-5374

CVE-2023-5374 affects the SourceCodester Online Computer and Laptop Store 1.0. The vulnerability is in the file products.php where manipulation of the argument c leads to an SQL injection. Exploitation can be performed remotely and the vulnerability has been publicly disclosed. The highest CVSS r...

CVE-2024-8083

Summary: CVE-2024-8083 affects SourceCodester Online Computer and Laptop Store 1.0, specifically the vulnerable function in /php-ocls/classes/Master.php?f=pay_order where the id parameter can be manipulated to trigger an SQL injection. The issue is exploitable remotely and, according to multiple ...

CVE-2024-4798

CVE-2024-4798 affects SourceCodester Online Computer and Laptop Store 1.0. The vulnerability lies in the file /admin/maintenance/manage_brand.php where the parameter id is used unsafely in an SQL query, enabling a remote SQL injection. The issue is exploitable over the network and the exploit has...