SQL Injection Vulnerability in SourceCodester E-Commerce Website 1.0
CVE-2021-25205

9.8CRITICAL

Key Information:

Vendor

E-commerce Website Project

Status
E-commerce Website
Vendor
CVE Published:
22 July 2021

What is CVE-2021-25205?

An SQL injection vulnerability exists in the SourceCodester E-Commerce Website version 1.0, allowing remote attackers to manipulate the database by sending specifically crafted SQL statements through the update parameter in the empViewUpdate.php file. This can lead to unauthorized access to data and potential data breaches if not mitigated effectively.

References

https://github.com/BigTiger2020/E-Commerce-Website/blob/m...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.