CVE-2020-25362 | BDVDB-2026-154653 Detail

Description#

The id paramater in Online Shopping Alphaware 1.0 has been discovered to be vulnerable to an Error-Based blind SQL injection in the /alphaware/details.php path. This allows an attacker to retrieve all databases.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.sourcecodester.com/download-code?nid=14368&title=Online+Shopping+Alphaware+in+PHP%2FMysql
https://www.exploit-db.com/exploits/48771
https://www.sourcecodester.com/php/14368/online-shopping-alphaware-phpmysql.html

Exploit#

No public exploit known

History#

Version 12021-06-02Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.