SourceCodester Young Entrepreneur E-Negosyo System sql injection
CVE-2023-1736
8.8HIGH
Key Information:
- Vendor
SourceCodester
- Vendor
- CVE Published:
- 30 March 2023
What is CVE-2023-1736?
A significant SQL injection vulnerability has been identified in the Young Entrepreneur E-Negosyo System, specifically within the file cart/controller.php through the 'add' action. The vulnerability arises from improper handling of the 'PROID' argument, which allows an attacker to manipulate SQL queries, potentially leading to unauthorized data access and compromise of the database integrity. This flaw emphasizes the necessity for robust input validation and security measures in web applications.
Affected Version(s)
Young Entrepreneur E-Negosyo System 1.0