CVE-2023-26905

CRITICAL 9.8CVE-2023-26905 · Published 19/03/2023 · updated 17/06/2026

In short

CVE-2023-26905 is a CRITICAL (CVSS 9.8) vulnerability affecting alphaware - simple e-commerce system (alphaware - simple e-commerce system project).
Chance of exploitation in the next 30 days (EPSS): 0.75%, higher than 55.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
alphaware - simple e-commerce system alphaware_-_simple_e-commerce_system_project	`= 1.0`	No fix yet

Description

An issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection that can directly issue instructions to the background database system via /alphaware/details.php?id.

References

1MurasaKi/bug_report · Exploit

More vulnerabilities in alphaware - simple e-commerce system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free