CVE-2023-1502 (alphaware_-_simple_e-commerce_system)

A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file function/edit_customer.php. The manipulation of the argument firstname/mi/lastname with the input a' RLIKE SLEEP(5) AND 'dAbu'='dAbu leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-223406 is the identifier assigned to this vulnerability.

argument attack commerce critical cve e-commerce exploit file function injection input issue manipulation may php public simple sleep sql sql injection system vulnerability