CVE-2023-1497

MEDIUM

SourceCodester Simple and Nice Shopping Cart Script 1.0 - Unrestric...

Title source: llm

Description

A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. It has been rated as critical. This issue affects some unknown processing of the file uploaderm.php. The manipulation of the argument submit leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223397 was assigned to this vulnerability.

References (3)

Core 3

Core References

Third Party Advisory vdb-entry technical-description

https://vuldb.com/?id.223397

Permissions Required, Third Party Advisory signature permissions-required

https://vuldb.com/?ctiid.223397

Broken Link exploit

https://github.com/Decemberus/BugHub/blob/main/simple%20and%20beautiful%20shopping%20cart%20system%20uploaderm.php%20has%20a%20file%20upload%20vulnerability.pdf

Scores

CVSS v3 6.3

EPSS 0.0048

EPSS Percentile 65.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE

CWE-434

Status published

Products (1)

simple_and_nice_shopping_cart_script_project/simple_and_nice_shopping_cart_script 1.0

Published Mar 19, 2023

Tracked Since Feb 18, 2026