CVE-2023-2244: medium-severity vulnerability in SourceCodester Online Eyewear Shop
SourceCodester Online Eyewear Shop GET Parameter update_status.php sql injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.3epss 0.7%
A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/update_status.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227229 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
SourceCodester · Online Eyewear ShopRelated CVEs — SourceCodester Online Eyewear Shop
In the same product, most dangerous first.
CVE-2023-1969MEDIUMSourceCodester Online Eyewear Shop GET Parameter manage_stock.php sql injectionEPSS 0.8%CVE-2023-0966LOWSourceCodester Online Eyewear Shop cross site scriptingEPSS 0.8%CVE-2024-8949MEDIUMSourceCodester Online Eyewear Shop Cart Content Master.php improper ownership managementEPSS 0.7%CVE-2025-2651MEDIUMSourceCodester Online Eyewear Shop admin exposure of information through directory listingEPSS 0.7%CVE-2025-2846MEDIUMSourceCodester Online Eyewear Shop Registration Users.php registration sql injectionEPSS 0.7%CVE-2024-5894MEDIUMSourceCodester Online Eyewear Shop manage_product.php sql injectionEPSS 0.6%