critical9.8
CVE-2020-24208
A SQL injection vulnerability in SourceCodester Online Shopping Alphaware 1.0 allows remote unauthenticated attackers to bypass the authentication process via …
Impact
A SQL injection vulnerability in SourceCodester Online Shopping Alphaware 1.0 allows remote unauthenticated attackers to bypass the authentication process via email and password parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Online Shopping Alphaware Project | Online Shopping Alphaware | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://packetstormsecurity.com/files/158684/Online-Shopping-Alphaware-1.0-SQL-Injection.html
- https://www.exploit-db.com/exploits/48725
- https://www.sourcecodester.com/download-code?nid=14368&title=Online+Shopping+Alphaware+in+PHP%2FMysql
- https://packetstormsecurity.com/files/158684/Online-Shopping-Alphaware-1.0-SQL-Injection.html
- https://www.exploit-db.com/exploits/48725
- https://www.sourcecodester.com/download-code?nid=14368&title=Online+Shopping+Alphaware+in+PHP%2FMysql