CVE-2023-2657

A vulnerability classified as problematic was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functionality of the file products.php. The manipulation of the argument search leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228799.

• CWE-79

• https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Online-Computer-and-Laptop-Store---Multiple-vulnerabilities.md#1xss-vulnerability-in-productsphpExploit
• https://vuldb.com/?ctiid.228799Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.228799Third Party Advisory
• https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Online-Computer-and-Laptop-Store---Multiple-vulnerabilities.md#1xss-vulnerability-in-productsphpExploit
• https://vuldb.com/?ctiid.228799Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.228799Third Party Advisory

Published

May 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26563The Syncfusion EJ2 Node File Provider 0102271 is vulnerable …9.8
• CVE-2023-26564The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerab…9.8
• CVE-2023-26566Sangoma FreePBX 1805 through 2203 on Linux contains hardcode…8.6
• CVE-2023-26567Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO …8.1
• CVE-2023-26568Unauthenticated SQL injection in the GetStudentGroupStudents…9.1
• CVE-2023-26569Unauthenticated SQL injection in the StudentPopupDetails_Tim…9.1
• CVE-2023-26570Missing authentication in the StudentPopupDetails_Timetable …7.5
• CVE-2023-26571Missing authentication in the SetStudentNotes method in IDA…7.5
• CVE-2023-26572Unauthenticated SQL injection in the GetExcursionList method…9.1
• CVE-2023-26573Missing authentication in the SetDB method in IDAttend’s IDW…9.1
• CVE-2023-26574Missing authentication in the SearchStudents method in IDAtt…7.5
• CVE-2023-26575Missing authentication in the SearchStudentsStaff method in…7.5