CVE-2023-5373

CWE-89SQL Injection3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.1%
top 81.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 4

Description

A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is the function register of the file Master.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-241254 is the identifier assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LExploitability: 3.9 | Impact: 3.4

🔴Vulnerability Details

2
CVEList
SourceCodester Online Computer and Laptop Store Master.php register sql injection2023-10-04
GHSA
GHSA-6f77-7m76-pqgc: A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 12023-10-04
CVE-2023-5373 (CRITICAL CVSS 9.8) | A vulnerability classified as criti | cvebase.io