nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-24208 CVE-2020-24208
CRITICAL
Online Shopping Alphaware 1.0 - Authentication Bypass
Record summary
CVE-2020-24208 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
A SQL injection vulnerability in SourceCodester Online Shopping Alphaware 1.0 allows remote unauthenticated attackers to bypass the authentication process via email and password parameters.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBOnline Shopping Alphaware 1.0 - Authentication BypassExploitDB exploitby Ahmed AbbasNot analyzed1 file
References
4packetstormsecurity.com
https://packetstormsecurity.com/files/158684/Online-Shopping-Alphaware-1.0-SQL-Injection.html exploit-db.com
https://www.exploit-db.com/exploits/48725 sourcecodester.com
https://www.sourcecodester.com/download-code?nid=14368&title=Online+Shopping+Alphaware+in+PHP%2FMysql