CVE Catalog
CVE-2023-37772
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk0.84%
53th percentile - higher than 53% of all known CVEs
Summary
The Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the database, jeopardizing user data security.
Recommendation
It is recommended to validate and sanitize input data and to update the application to the latest version to eliminate this vulnerability.
Other vulnerabilities in Online Shopping Portal Project v3.1
Original NVD description (English source)
Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS