SourceCodester Online Pizza Ordering System Login Page sql injection

CVE-2023-1455

What is CVE-2023-1455?

A SQL injection vulnerability exists in the login page of the Online Pizza Ordering System by SourceCodester. This flaw arises from improper handling of user-supplied input in the 'email' argument of the action request. An attacker could exploit this vulnerability to execute arbitrary SQL commands against the database. Such an exploit may allow unauthorized access to sensitive information. Given the complexity and specific conditions required for a successful attack, it is essential for users and administrators to apply appropriate security measures to safeguard their applications.

References