Vulnerability CVE-2023-3503


Published: 2023-07-04

Description:
A vulnerability has been found in SourceCodester Shopping Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232951.

Type:

CWE-434

(Unrestricted Upload of File with Dangerous Type)

 References:
https://github.com/Turbo51/CveHubList/blob/main/Shopping%20Website%20(E-Commerce)%20%20insert-product.php%20has%20a%20file%20upload%20(RCE)%20vulnerability.pdf
https://vuldb.com/?ctiid.232951
https://vuldb.com/?id.232951

Copyright 2026, cxsecurity.com

 

Back to Top