vendor:
Online Shopping System Advanced
by:
Furkan Gedik
7.1
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Online Shopping System Advanced
Affected Version From: 1
Affected Version To: 1
Patch Exists: NO
Related CWE: CVE-2023-XXXX (Pending)
CPE: a:puneethreddyhc:online_shopping_system_advanced:1.0
Platforms Tested: Kali Linux 2020.3
2023
Online Shopping System Advanced SQL Injection Vulnerability
An SQL injection vulnerability in Online Shopping System Advanced allows attackers to gain unauthorized access to the database by injecting malicious SQL statements through the 'cm' parameter. This can lead to the disclosure of sensitive information like user credentials.
Mitigation:
To mitigate this vulnerability, input validation and parameterized queries should be implemented to sanitize user input and prevent SQL injection attacks.