SourceCodester Alphaware Simple E-Commerce System admin_index.php sql injection
CVE-2023-1503

8.1HIGH

Key Information:

Vendor

SourceCodester
Status
Alphaware Simple E-Commerce System
Vendor
CVE Published:
20 March 2023

What is CVE-2023-1503?

A vulnerability has been identified in the SourceCodester Alphaware Simple E-Commerce System 1.0, specifically in the admin/admin_index.php file. The flaw allows attackers to manipulate the username and password input parameters, leading to SQL injection. This vulnerability permits remote exploitation, where malicious actors may execute arbitrary SQL commands through crafted input. While the attack complexity is reported as high, the public disclosure of this exploit increases the urgency for affected users to apply patches and secure their installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Alphaware Simple E-Commerce System 1.0

References

https://vuldb.com/?id.223407
vdb-entrytechnical-description
https://vuldb.com/?ctiid.223407
signature

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

WWesleywww (VulDB User)
JSON
.