A vulnerability was found in code-projects E-Commerce Website 1.0. It has been classified as critical. Affected is an unknown function of the file index_search.php. The manipulation of the argument search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249000.
References
| Link | Resource |
|---|---|
| https://github.com/h4md153v63n/CVEs/blob/main/E-Commerce_Website/E-Commerce%20Website%20-%20SQL%20Injection%201.md | Exploit |
| https://github.com/h4md153v63n/CVEs/blob/main/E-Commerce_Website/E-Commerce%20Website%20-%20SQL%20Injection%201.md | Exploit |
| https://vuldb.com/?ctiid.249000 | Permissions Required VDB Entry |
| https://vuldb.com/?ctiid.249000 | Permissions Required VDB Entry |
| https://vuldb.com/?id.249000 | Third Party Advisory VDB Entry |
| https://vuldb.com/?id.249000 | Third Party Advisory VDB Entry |
Configurations
History
06 Dec 2024, 19:56
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| First Time |
Fabianros
Fabianros e-commerce Website |
|
| CPE | cpe:2.3:a:fabianros:e-commerce_website:1.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| References | () https://vuldb.com/?ctiid.249000 - Permissions Required, VDB Entry | |
| References | () https://github.com/h4md153v63n/CVEs/blob/main/E-Commerce_Website/E-Commerce%20Website%20-%20SQL%20Injection%201.md - Exploit | |
| References | () https://vuldb.com/?id.249000 - Third Party Advisory, VDB Entry |
29 Feb 2024, 01:42
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-29 01:42
Updated : 2024-12-06 19:56
NVD link : CVE-2023-7105
Mitre link : CVE-2023-7105
JSON object : View
Products Affected
fabianros
- e-commerce_website
CWE
No CWE.