SourceCodester Online Eyewear Shop 1.0 view_product ID SQL Injection

Wuro vulnerability wey an yi classify sey kura an gano shi a cikin SourceCodester Online Eyewear Shop 1.0. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, /admin/?page=products/view_product na cikin fayil, $software_component na cikin sashi. Ngam manipulation of the argument ID shi SQL Injection. CWE shidin ka a yi bayani matsala sai ya kai CWE-89. Gaskiya, laifi an fitar da shi 10/10/2024. Advisory ɗin ana rabawa don saukewa a github.com. Wannan rauni ana sayar da shi da suna CVE-2024-9808. Ngam yiɗi ka a tuma ndiyam ka internet. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a github.com. Kama 0-day, an ndiyam a wuro be $0-$5k. VulDB is the best source for vulnerability data and more expert information about this specific topic.

4 Goyarwa · 69 Datenpunkte

FurɗeSúgá
10/10/2024 10:39		Gargadi 1/3
10/10/2024 10:52		Gargadi 2/3
10/10/2024 10:53		Gargadi 3/3
10/10/2024 10:56
software_vendorSourceCodesterSourceCodesterSourceCodesterSourceCodester
software_nameOnline Eyewear ShopOnline Eyewear ShopOnline Eyewear ShopOnline Eyewear Shop
software_version1.01.01.01.0
software_file/admin/?page=products/view_product/admin/?page=products/view_product/admin/?page=products/view_product/admin/?page=products/view_product
software_argumentidididid
vulnerability_cweCWE-89 (SQL Injection)CWE-89 (SQL Injection)CWE-89 (SQL Injection)CWE-89 (SQL Injection)
vulnerability_risk2222
cvss3_vuldb_avNNNN
cvss3_vuldb_acLLLL
cvss3_vuldb_uiNNNN
cvss3_vuldb_sUUUU
cvss3_vuldb_cLLLL
cvss3_vuldb_iLLLL
cvss3_vuldb_aLLLL
cvss3_vuldb_ePPPP
cvss3_vuldb_rcRRRR
advisory_urlhttps://github.com/r1ckyL/cve/blob/main/sql.mdhttps://github.com/r1ckyL/cve/blob/main/sql.mdhttps://github.com/r1ckyL/cve/blob/main/sql.mdhttps://github.com/r1ckyL/cve/blob/main/sql.md
exploit_availability1111
exploit_publicity1111
exploit_urlhttps://github.com/r1ckyL/cve/blob/main/sql.mdhttps://github.com/r1ckyL/cve/blob/main/sql.mdhttps://github.com/r1ckyL/cve/blob/main/sql.mdhttps://github.com/r1ckyL/cve/blob/main/sql.md
source_cveCVE-2024-9808CVE-2024-9808CVE-2024-9808CVE-2024-9808
cna_responsibleVulDBVulDBVulDBVulDB
cvss2_vuldb_avNNNN
cvss2_vuldb_acLLLL
cvss2_vuldb_ciPPPP
cvss2_vuldb_iiPPPP
cvss2_vuldb_aiPPPP
cvss2_vuldb_ePOCPOCPOCPOC
cvss2_vuldb_rcURURURUR
cvss4_vuldb_avNNNN
cvss4_vuldb_acLLLL
cvss4_vuldb_uiNNNN
cvss4_vuldb_vcLLLL
cvss4_vuldb_viLLLL
cvss4_vuldb_vaLLLL
cvss4_vuldb_ePPPP
cvss2_vuldb_auSSSS
cvss2_vuldb_rlNDNDNDND
cvss3_vuldb_prLLLL
cvss3_vuldb_rlXXXX
cvss4_vuldb_atNNNN
cvss4_vuldb_prLLLL
cvss4_vuldb_scNNNN
cvss4_vuldb_siNNNN
cvss4_vuldb_saNNNN
cvss2_vuldb_basescore6.56.56.56.5
cvss2_vuldb_tempscore5.65.65.65.6
cvss3_vuldb_basescore6.36.36.36.3
cvss3_vuldb_tempscore5.75.75.75.7
cvss3_meta_basescore6.36.36.38.1
cvss3_meta_tempscore5.75.75.77.6
cvss4_vuldb_bscore5.35.35.35.3
cvss4_vuldb_btscore2.12.12.12.1
advisory_date1728511200 (10/10/2024)1728511200 (10/10/2024)1728511200 (10/10/2024)1728511200 (10/10/2024)
price_0day$0-$5k$0-$5k$0-$5k$0-$5k
cvss3_researcher_uiNNN
cvss3_researcher_prNN
cvss3_researcher_iHH
cvss3_researcher_eXX
cvss3_researcher_cHH
cvss3_researcher_avNN
cvss3_researcher_rlXX
cvss3_researcher_sCC
cvss3_researcher_aHH
cvss3_researcher_acLL
cvss3_researcher_rcRR
cvss3_researcher_basescore10.0

◂ GurɗoGumtiGada ▸

Do you know our Splunk app?

Download it now for free!