CVE-2023-2244
Last modified
CVE-2023-2244 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. EPSS estimates a 0.73% chance of exploitation in the next 30 days.
Description
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/update_status.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227229 was assigned to this vulnerability.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Oretnom23 | Online Eyewear Shop | 1.0 |
References
- https://github.com/T4y1oR/bug_report/blob/main/SQLi-1.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.227229Third Party Advisory
- https://vuldb.com/?id.227229Third Party Advisory
- https://github.com/T4y1oR/bug_report/blob/main/SQLi-1.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.227229Third Party Advisory
- https://vuldb.com/?id.227229Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-2244?
How severe is CVE-2023-2244?
How do I fix CVE-2023-2244?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-22434Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2023-22435Experion server may experience a DoS due to a stack overflow…7.5
- CVE-2023-22436The kernel subsystem function check_permission_for_set_token…7.8
- CVE-2023-22437Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2023-22438Cross-site scripting vulnerability in Contents Management of…5.4
- CVE-2023-22439 Improper input validation of a large HTTP request in the Co…4.3
- CVE-2023-22440Incorrect default permissions in the Intel(R) SCS Add-on sof…7.8
- CVE-2023-22441Missing authentication for critical function exists in Seiko…8.6
- CVE-2023-22442Out of bounds write in some Intel(R) Server Board BMC firmwa…7.1
- CVE-2023-22443Integer overflow in some Intel(R) Server Board BMC firmware …5.5
- CVE-2023-22444Improper initialization in some Intel(R) NUC 13 Extreme Comp…4.4
- CVE-2023-22445Rejected reason: This CVE ID has been rejected or withdrawn …
Are you affected by CVE-2023-2244?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
