SourceCodester Simple Mobile Comparison Website GET Parameter view_category.php sql injection

CVE-2023-1908

What is CVE-2023-1908?

An SQL Injection vulnerability has been identified in the SourceCodester Simple Mobile Comparison Website 1.0, specifically within the GET Parameter Handler component. This issue arises from improper handling of the 'id' parameter in the /admin/categories/view_category.php file, allowing attackers to manipulate database queries. The vulnerability enables remote attackers to execute arbitrary SQL statements, potentially leading to unauthorized access to sensitive data and system compromise. The exploit has been made publicly known, increasing the urgency for users to apply appropriate patches and safeguard their applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References