CVE-2022-30004

Sourcecodester Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection Vulnerability allowing remote attackers to dump the SQL database via time-based SQL injection..
Configurations

Configuration 1 (hide)

cpe:2.3:a:online_market_place_site_project:online_market_place_site:1.0:*:*:*:*:*:*:*

History

21 Nov 2024, 07:02

Type Values Removed Values Added
References () https://packetstormsecurity.com/files/168249/Online-Market-Place-Site-1.0-SQL-Injection.html - Exploit, Third Party Advisory, VDB Entry () https://packetstormsecurity.com/files/168249/Online-Market-Place-Site-1.0-SQL-Injection.html - Exploit, Third Party Advisory, VDB Entry
References () https://www.sourcecodester.com/php/15273/online-market-place-site-phpoop-free-source-code.html - Product () https://www.sourcecodester.com/php/15273/online-market-place-site-phpoop-free-source-code.html - Product

Information

Published : 2022-09-26 20:15

Updated : 2024-11-21 07:02


NVD link : CVE-2022-30004

Mitre link : CVE-2022-30004

CVE.ORG link : CVE-2022-30004


JSON object : View

Products Affected

online_market_place_site_project

  • online_market_place_site
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')