CVE-2023-1955

published 2023-04-08

CVE-2023-1955: A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is an unknown function of the file…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is an unknown function of the file login.php of the component User Registration. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225342 is the identifier assigned to this vulnerability.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
linux	linux_kernel	>= 2.6.24 < 4.14.326	4.14.326
linux	linux_kernel	>= 4.15.0 < 4.19.295	4.19.295
linux	linux_kernel	>= 4.20.0 < 5.4.257	5.4.257
linux	linux_kernel	>= 5.11.0 < 5.15.132	5.15.132
linux	linux_kernel	>= 5.16.0 < 6.1.54	6.1.54
linux	linux_kernel	>= 5.5.0 < 5.10.195	5.10.195
linux	linux_kernel	>= 6.2.0 < 6.5.4	6.5.4
oretnom23	online_computer_and_laptop_store	—	—
sourcecodester	online_computer_and_laptop_store	—	—

CWE-89 CWE-366