SQL Injection Vulnerability in SourceCodester Online Eyewear Shop

CVE-2024-9317

Summary

A severe SQL injection vulnerability has been identified in the SourceCodester Online Eyewear Shop version 1.0. The flaw specifically resides in the 'delete_category' function of the Master.php file, where improper handling of the 'id' argument can allow attackers to manipulate SQL queries. This vulnerability can be exploited remotely, meaning that attackers can execute arbitrary SQL commands without needing physical access to the vulnerable system. Publicly disclosed exploits for this vulnerability pose a significant risk, highlighting the importance of immediate remediation measures to safeguard sensitive data and maintain website integrity.

References