CVE-2023-3985

KRITISCH 9.8CVE-2023-3985 · Published 28/07/2023 · updated 17/06/2026

Kurz gesagt

CVE-2023-3985 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in online jewelry store (online jewelry store project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.94%, höher als bei 61.0% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
online jewelry store online_jewelry_store_project	`= 1.0`	No fix yet

Description

A vulnerability has been found in SourceCodester Online Jewelry Store 1.0 and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235606 is the identifier assigned to this vulnerability.

References

MaxLiu98/Jewelry-Store-System · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Weitere Schwachstellen in online jewelry store

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free