cbcvebase.

Sourcecodester Online Computer And Laptop Store vulnerabilities

30 known vulnerabilities affecting sourcecodester/online_computer_and_laptop_store.

Total CVEs
30
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL13HIGH12MEDIUM5

Vulnerabilities

Page 1 of 2
CVE-2023-1826P2CRITICALCVSS 9.8PoCv1.02023-04-04
CVE-2023-1826 [CRITICAL] CWE-434 CVE-2023-1826: A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and L A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file php-ocls\admin\system_info\index.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-224841 was assigned t
nvd
CVE-2024-4820P3HIGHCVSS 8.8v1.02024-05-14
CVE-2024-4820 [HIGH] CWE-434 CVE-2024-4820: A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been declar A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/SystemSettings.php?f=update_settings. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the
nvd
CVE-2023-5374P3CRITICALCVSS 9.8v1.02023-10-04
CVE-2023-5374 [CRITICAL] CWE-89 CVE-2023-5374: A vulnerability classified as critical was found in SourceCodester Online Computer and Laptop Store A vulnerability classified as critical was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functionality of the file products.php. The manipulation of the argument c leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The a
nvd
CVE-2024-4798P3CRITICALCVSS 9.8v1.02024-05-14
CVE-2024-4798 [CRITICAL] CWE-89 CVE-2024-4798: A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /admin/maintenance/manage_brand.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed t
nvd
CVE-2023-1952P3CRITICALCVSS 9.8v1.02023-04-08
CVE-2023-1952 [CRITICAL] CWE-89 CVE-2023-1952: A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classi A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as critical. This affects an unknown part of the file /?p=products of the component Product Search. The manipulation of the argument search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to t
nvd
CVE-2023-1956P3HIGHCVSS 8.8v1.02023-04-08
CVE-2023-1956 [HIGH] CWE-22 CVE-2023-1956: A vulnerability classified as critical was found in SourceCodester Online Computer and Laptop Store A vulnerability classified as critical was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=delete_img of the component Image Handler. The manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit has
nvd
CVE-2024-8083P3HIGHCVSS 8.8v1.02024-08-22
CVE-2024-8083 [HIGH] CWE-89 CVE-2024-8083: A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /php-ocls/classes/Master.php?f=pay_order. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed
nvd
CVE-2023-1942P3CRITICALCVSS 9.8v1.02023-04-07
CVE-2023-1942 [CRITICAL] CWE-434 CVE-2023-1942: A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/?page=user of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed
nvd
CVE-2023-2660P3CRITICALCVSS 9.8v1.02023-05-11
CVE-2023-2660 [CRITICAL] CWE-89 CVE-2023-2660: A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file view_categories.php. The manipulation of the argument c leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-22
nvd
CVE-2023-5373P3CRITICALCVSS 9.8v1.02023-10-04
CVE-2023-5373 [CRITICAL] CWE-89 CVE-2023-5373: A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop S A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is the function register of the file Master.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-241254 is
nvd
CVE-2023-1955P3CRITICALCVSS 9.8v1.02023-04-08
CVE-2023-1955 [CRITICAL] CWE-89 CVE-2023-1955: A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop S A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is an unknown function of the file login.php of the component User Registration. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi
nvd
CVE-2023-2242P3HIGHCVSS 8.8v1.02023-04-22
CVE-2023-2242 [HIGH] CWE-89 CVE-2023-2242: A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component GET Parameter Handler. The manipulation of the argument c/s leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public
nvd
CVE-2023-1957P3HIGHCVSS 8.8v1.02023-04-08
CVE-2023-1957 [HIGH] CWE-89 CVE-2023-1957: A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=save_sub_category of the component Subcategory Handler. The manipulation of the argument sub_category leads to sql injection. The attack may be laun
nvd
CVE-2023-2658P3CRITICALCVSS 9.8v1.02023-05-11
CVE-2023-2658 [CRITICAL] CWE-89 CVE-2023-2658: A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file products.php. The manipulation of the argument c leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be
nvd
CVE-2023-1959P3HIGHCVSS 8.8v1.02023-04-08
CVE-2023-1959 [HIGH] CWE-89 CVE-2023-1959: A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=save_category. The manipulation of the argument category leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and
nvd
CVE-2023-2659P3CRITICALCVSS 9.8v1.02023-05-11
CVE-2023-2659 [CRITICAL] CWE-89 CVE-2023-2659: A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and L A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file view_product.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The id
nvd
CVE-2023-2661P3CRITICALCVSS 9.8v1.02023-05-11
CVE-2023-2661 [CRITICAL] CWE-89 CVE-2023-2661: A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as c A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The ass
nvd
CVE-2023-1954P3HIGHCVSS 8.8v1.02023-04-08
CVE-2023-1954 [HIGH] CWE-89 CVE-2023-1954: A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been rated A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been rated as critical. This issue affects the function save_inventory of the file /admin/product/manage.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used
nvd
CVE-2023-1960P3HIGHCVSS 8.8v1.02023-04-08
CVE-2023-1960 [HIGH] CWE-89 CVE-2023-1960: A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as c A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=delete_category. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be
nvd
CVE-2023-1953P3HIGHCVSS 8.8v1.02023-04-08
CVE-2023-1953 [HIGH] CWE-89 CVE-2023-1953: A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been declar A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/sales/index.php. The manipulation of the argument date_start/date_end leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and
nvd
Sourcecodester Online Computer And Laptop Store vulnerabilities | cvebase