CVE-2023-3458

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file forgot-password.php. The manipulation of the argument contact leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232675.

• CWE-89

• https://github.com/AD-Appledog/CveHubList/blob/main/Shopping%20Website%20(E-Commerce)%20forgot-password.php%20has%20Sqlinjection.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.232675Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.232675Third Party Advisory, VDB Entry
• https://github.com/AD-Appledog/CveHubList/blob/main/Shopping%20Website%20(E-Commerce)%20forgot-password.php%20has%20Sqlinjection.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.232675Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.232675Third Party Advisory, VDB Entry

Published

Jun 29, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-3457A vulnerability was found in SourceCodester Shopping Website…9.8
• CVE-2023-34570Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered t…6.7
• CVE-2023-34571Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered t…6.7
• CVE-2023-34575SQL injection vulnerability in PrestaShop opartsavecart thro…9.8
• CVE-2023-34576SQL injection vulnerability in updatepos.php in PrestaShop o…9.8
• CVE-2023-34577SQL injection vulnerability in Prestashop opartplannedpopup …9.8
• CVE-2023-34581Sourcecodester Service Provider Management System v1.0 is vu…9.8
• CVE-2023-34585Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-3459The Export and Import Users and Customers plugin for WordPre…7.2
• CVE-2023-34596A vulnerability in Aeotec WallMote Switch firmware v2.3 allo…6.5
• CVE-2023-34597A vulnerability in Fibaro Motion Sensor firmware v3.4 allows…6.5
• CVE-2023-34598Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI)…9.8