CVE:CVE-2023-3458
CNNVD:CNNVD-202306-2153
SourceCodester Shopping Website是一个购物网站类型的CMS。
SourceCodester Shopping Website 1.0版本存在SQL注入漏洞，该漏洞源于 forgot-password.php 页面的 contact 参数可能导致 SQL 注入。
solution:Upgrade shopping_website_project shopping_website to a higher version than 1.0,and avoid the version 1.0