CVE-2023-2244
Last modified
CVE-2023-2244 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. EPSS estimates a 0.73% chance of exploitation in the next 30 days.
Description
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/update_status.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227229 was assigned to this vulnerability.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Oretnom23 | Online Eyewear Shop | 1.0 |
References
- https://github.com/T4y1oR/bug_report/blob/main/SQLi-1.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.227229Third Party Advisory
- https://vuldb.com/?id.227229Third Party Advisory
- https://github.com/T4y1oR/bug_report/blob/main/SQLi-1.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.227229Third Party Advisory
- https://vuldb.com/?id.227229Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-2244?
How severe is CVE-2023-2244?
How do I fix CVE-2023-2244?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-2243A vulnerability was found in SourceCodester Complaint Manage…8.8
- CVE-2023-22432Open redirect vulnerability exists in web2py versions prior …6.1
- CVE-2023-22435Experion server may experience a DoS due to a stack overflow…7.5
- CVE-2023-22436The kernel subsystem function check_permission_for_set_token…7.8
- CVE-2023-22438Cross-site scripting vulnerability in Contents Management of…5.4
- CVE-2023-22439 Improper input validation of a large HTTP request in the Co…4.3
- CVE-2023-22440Incorrect default permissions in the Intel(R) SCS Add-on sof…7.8
- CVE-2023-22441Missing authentication for critical function exists in Seiko…8.6
- CVE-2023-22442Out of bounds write in some Intel(R) Server Board BMC firmwa…7.1
- CVE-2023-22443Integer overflow in some Intel(R) Server Board BMC firmware …5.5
- CVE-2023-22444Improper initialization in some Intel(R) NUC 13 Extreme Comp…4.4
- CVE-2023-22447Insertion of sensitive information into log file in the Open…4.4
Are you affected by CVE-2023-2244?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
