CVE:CVE-2023-0673
CNNVD:CNNVD-202302-324
Online Eyewear Shop是Carlo Montero个人开发者的一个在线眼镜店。
Online Eyewear Shop 1.0版本存在SQL注入漏洞，该漏洞源于文件oews/products/view_product.php 存在未知函数，通过参数name/pwd可以进行SQL注入。
solution:Upgrade online_eyewear_shop_project online_eyewear_shop to a higher version than 1.0,and avoid the version 1.0