CVE-2023-2242

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component GET Parameter Handler. The manipulation of the argument c/s leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227227.

• CWE-89

• https://docs.google.com/document/d/1GZt9MKB2K-nDrg0cnrnU6_z9wDd9xPE-YJbPV2Qgqg4/editExploit, Third Party Advisory
• https://vuldb.com/?ctiid.227227Permissions Required, Third Party Advisory
• https://vuldb.com/?id.227227Third Party Advisory
• https://docs.google.com/document/d/1GZt9MKB2K-nDrg0cnrnU6_z9wDd9xPE-YJbPV2Qgqg4/editExploit, Third Party Advisory
• https://vuldb.com/?ctiid.227227Permissions Required, Third Party Advisory
• https://vuldb.com/?id.227227Third Party Advisory

Published

Apr 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22414A Missing Release of Memory after Effective Lifetime vulnera…6.5
• CVE-2023-22415An Out-of-Bounds Write vulnerability in the H.323 ALG of Jun…7.5
• CVE-2023-22416A Buffer Overflow vulnerability in SIP ALG of Juniper Networ…7.5
• CVE-2023-22417A Missing Release of Memory after Effective Lifetime vulnera…7.5
• CVE-2023-22418On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, …6.1
• CVE-2023-22419Out-of-bounds read vulnerability exists in Kostac PLC Progra…7.8
• CVE-2023-22421Out-of-bounds read vulnerability exists in Kostac PLC Progra…7.8
• CVE-2023-22422On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before …7.5
• CVE-2023-22424Use-after-free vulnerability exists in Kostac PLC Programmin…7.8
• CVE-2023-22425Stored cross-site scripting vulnerability in Schedule functi…5.4
• CVE-2023-22427Stored cross-site scripting vulnerability in Theme switching…4.8
• CVE-2023-22428 Improper privilege validation in Command Centre Server allo…6.5