CVE-2023-1960 is a critical vulnerability found in the SourceCodester Online Computer and Laptop Store 1.0, affecting an unknown part of the file /classes/Master.php?f=delete_category. The issue is a SQL injection vulnerability caused by the manipulation of the argument 'id' with an unknown input. The vulnerability impacts confidentiality, integrity, and availability, and has been rated as 8.8 HIGH by NIST and 6.3 MEDIUM by VulDB according to CVSS 3.x Severity and Metrics. The affected system is the SourceCodester Online Computer and Laptop Store, specifically version 1.0.

How do I know if I'm affected?

If you're using the SourceCodester Online Computer and Laptop Store, specifically version 1.0, you may be affected by the vulnerability. This critical vulnerability is related to SQL injection and impacts the confidentiality, integrity, and availability of your system. To determine if you're affected, check the version of your Online Computer and Laptop Store software.

What should I do if I'm affected?

If you're affected by the vulnerability, it's important to act quickly. Confirm you're using the vulnerable version of the Online Computer and Laptop Store software. Unfortunately, there are no known countermeasures or patches available. As a precaution, consider replacing the affected software with an alternative product to protect your system from potential attacks.

Is CVE-2023-1960 in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-1960 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog, according to the information available on the NVD page. This vulnerability was published on April 8, 2023. The NVD page does not provide a due date or required action to address the vulnerability. In simpler terms, this vulnerability is a security issue in the SourceCodester Online Computer and Laptop Store 1.0, which could lead to potential breaches in confidentiality, integrity, and availability.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-89, which involves improper neutralization of special elements in SQL commands, known as SQL injection. This weakness affects the system's confidentiality, integrity, and availability.

For more details

CVE-2023-1960 is a critical vulnerability affecting the SourceCodester Online Computer and Laptop Store 1.0, with potential consequences for system confidentiality, integrity, and availability. For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or links below.

• VulDB Login Required

• CVE-2023-1960 Details on VulDB