CVE-2023-2660

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file view_categories.php. The manipulation of the argument c leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-228802 is the identifier assigned to this vulnerability.

• CWE-89
• CWE-79

• https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Online-Computer-and-Laptop-Store---Multiple-vulnerabilities.md#4sql-injection-vulnerability-in-view_categoriesphpExploit
• https://vuldb.com/?ctiid.228802Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.228802Third Party Advisory, VDB Entry
• https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Online-Computer-and-Laptop-Store---Multiple-vulnerabilities.md#4sql-injection-vulnerability-in-view_categoriesphpExploit
• https://vuldb.com/?ctiid.228802Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.228802Third Party Advisory, VDB Entry

Published

May 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26592Deserialization of untrusted data in some Intel(R) Thunderbo…3.8
• CVE-2023-26593CENTUM series provided by Yokogawa Electric Corporation are …7.8
• CVE-2023-26595Denial-of-service (DoS) vulnerability in Message of Cybozu G…6.5
• CVE-2023-26596Improper access control in some Intel(R) Thunderbolt(TM) DCH…2.5
• CVE-2023-26597Controller DoS due to buffer overflow in the handling of a s…7.5
• CVE-2023-26599XSS vulnerability in TripleSign in Tripleplay Platform relea…6.1
• CVE-2023-26600ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plu…6.5
• CVE-2023-26601Zoho ManageEngine ServiceDesk Plus through 14104, Asset Expl…7.5
• CVE-2023-26602ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attac…9.8
• CVE-2023-26603JumpCloud Agent before 1.178.0 Creates a Temporary File in a…5.9
• CVE-2023-26604systemd before 247 does not adequately block local privilege…7.8
• CVE-2023-26605In the Linux kernel 6.0.8, there is a use-after-free in inod…7.8