Sql injection

2023-06-2914:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

sourcecodester shopping website

sql injection

remote attack

forgot password

vdb-232675

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.9%

JSON

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file forgot-password.php. The manipulation of the argument contact leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232675.

CPENameOperatorVersion
shopping_websiteeq1.0

CPE	Name	Operator	Version
	shopping_website	eq	1.0

References

github.com/AD-Appledog/CveHubList/blob/main/Shopping%20Website%20(E-Commerce)%20forgot-password.php%20has%20Sqlinjection.pdf

vuldb.com/?ctiid.232675

vuldb.com/?id.232675