CVE-2023-3457

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-232674 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/qwegz/CveList/blob/main/Shopping%20Website%20(E-Commerce)%20%20index.php%20has%20Sqlinjection.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.232674Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.232674Third Party Advisory, VDB Entry
• https://github.com/qwegz/CveList/blob/main/Shopping%20Website%20(E-Commerce)%20%20index.php%20has%20Sqlinjection.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.232674Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.232674Third Party Advisory, VDB Entry

Published

Jun 29, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34563netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buf…9.8
• CVE-2023-34565Netbox 3.5.1 is vulnerable to Cross Site Scripting (XSS) in …5.4
• CVE-2023-34566Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered t…9.8
• CVE-2023-34567Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered t…6.7
• CVE-2023-34568Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered t…6.7
• CVE-2023-34569Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered t…6.7
• CVE-2023-34570Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered t…6.7
• CVE-2023-34571Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered t…6.7
• CVE-2023-34575SQL injection vulnerability in PrestaShop opartsavecart thro…9.8
• CVE-2023-34576SQL injection vulnerability in updatepos.php in PrestaShop o…9.8
• CVE-2023-34577SQL injection vulnerability in Prestashop opartplannedpopup …9.8
• CVE-2023-3458A vulnerability was found in SourceCodester Shopping Website…9.8