Description
SourceCodester Online Eyewear Shop是SourceCodester开源的一个使用 PHP 和 MySQL 开发的在线眼镜店网站项目，它提供了一个在线购物和订购平台，面向眼镜业务及其潜在客户。 SourceCodester Online Eyewear Shop 1.0版本存在注入漏洞，该漏洞源于对文件/oews/classes/Master.php中参数ID的错误操作导致SQL注入。
SourceCodester Online Eyewear Shop 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.imfht.com/detail/CVE-2025-3817
https://avd.aliyun.com/detail?id=AVD-2024-9081
https://www.knowsafe.com/ti/info/0/992331
https://github.com/gh-ost00/CVE-2024-8949-POC
https://vuldb.com/?submit.423231
https://radar.offseq.com/threat/cve-2025-4173-sql-injection-in-sourcecodester-online-eyewear-shop-bebdae
https://nvd.nist.gov/vuln/detail/cve-2025-4173
https://www.cve.org/CVERecord?id=CVE-2025-3817
https://app.opencve.io/cve/?product=online_eyewear_shop&vendor=sourcecodester
https://www.exploit-db.com/exploits/51246