CVE-2023-27052

Impact

E-Commerce System v1.0 ws discovered to contain a SQL injection vulnerability via the id parameter at /admin/delete_user.php.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/lcg-22266/bug_report/blob/main/vendors/razormist/Moosikay%20-%20E-Commerce%20System/SQLi-1.md
• https://github.com/lcg-22266/bug_report/blob/main/vendors/razormist/Moosikay%20-%20E-Commerce%20System/SQLi-1.md