akshadjoshi/CVE-2023-38890

akshadjoshi/CVE-2023-38890

GitHubGitHub
GitHubgithub.com
Releases0
poc
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-38890↗
8.8 HIGH—

Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username field, enabling SQL Injection attacks.