CVE-2023-0686

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects the function update_cart of the file /oews/classes/Master.php?f=update_cart of the component HTTP POST Request Handler. The manipulation of the argument cart_id leads to sql injection. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The identifier VDB-220245 was assigned to this vulnerability.

• CWE-89

• https://vuldb.com/?ctiid.220245Permissions Required, Third Party Advisory
• https://vuldb.com/?id.220245Third Party Advisory
• https://vuldb.com/?ctiid.220245Permissions Required, Third Party Advisory
• https://vuldb.com/?id.220245Third Party Advisory

Published

Feb 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0679A vulnerability was found in SourceCodester Canteen Manageme…8.1
• CVE-2023-0680Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-0681Rapid7 InsightVM versions 6.6.178 and lower suffers from an …6.1
• CVE-2023-0683A valid, authenticated XCC user with read only access may ga…8.8
• CVE-2023-0684The Wicked Folders plugin for WordPress is vulnerable to aut…4.3
• CVE-2023-0685The Wicked Folders plugin for WordPress is vulnerable to Cro…4.3
• CVE-2023-0687A vulnerability was found in GNU C Library 2.38. It has been…9.8
• CVE-2023-0688The Metform Elementor Contact Form Builder for WordPress is …6.5
• CVE-2023-0689The Metform Elementor Contact Form Builder for WordPress is …4.3
• CVE-2023-0690HashiCorp Boundary from 0.10.0 through 0.11.2 contain an iss…7.1
• CVE-2023-0691The Metform Elementor Contact Form Builder for WordPress is …4.3
• CVE-2023-0692The Metform Elementor Contact Form Builder for WordPress is …4.3