SourceCodester Alphaware Simple E-Commerce System sql injection
CVE-2023-1504

8.1HIGH

Key Information:

Vendor

SourceCodester
Status
Alphaware Simple E-Commerce System
Vendor
CVE Published:
20 March 2023

What is CVE-2023-1504?

A vulnerability exists in SourceCodester's Alphaware Simple E-Commerce System 1.0, allowing for SQL injection through the manipulation of email/password input fields. An attacker could exploit this vulnerability remotely, executing arbitrary SQL commands that could compromise user data or application integrity. The complexity required for attack execution is relatively high, indicating that successful exploitation may necessitate advanced technical skills. The vulnerability has already been publicly disclosed, making it imperative for users to assess their systems and implement necessary security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Alphaware Simple E-Commerce System 1.0

References

https://vuldb.com/?id.223408
vdb-entrytechnical-description
https://vuldb.com/?ctiid.223408
signature

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

WWesleywww (VulDB User)
JSON
.