SourceCodester Simple Mobile Comparison Website GET Parameter view_category.php sql injection

CVE-2023-1908

What is CVE-2023-1908?

An SQL Injection vulnerability has been identified in the SourceCodester Simple Mobile Comparison Website 1.0, specifically within the GET Parameter Handler component. This issue arises from improper handling of the 'id' parameter in the /admin/categories/view_category.php file, allowing attackers to manipulate database queries. The vulnerability enables remote attackers to execute arbitrary SQL statements, potentially leading to unauthorized access to sensitive data and system compromise. The exploit has been made publicly known, increasing the urgency for users to apply appropriate patches and safeguard their applications.

References