CVE-2023-0785: SourceCodester Best Online News Portal check_availability.php information exposure
A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file checkavailability.php. The manipulation of the argument username leads to exposure of sensitive information through data queries. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-220645 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-0785?
The severity of CVE-2023-0785 is classified as problematic due to the potential exposure of sensitive information.
How do I fix CVE-2023-0785?
To fix CVE-2023-0785, ensure that proper validation and sanitization of user inputs in check_availability.php is implemented.
What systems are affected by CVE-2023-0785?
CVE-2023-0785 affects version 1.0 of the Best Online News Portal.
What type of information is exposed by CVE-2023-0785?
CVE-2023-0785 leads to the exposure of sensitive information, particularly through the manipulation of the username argument.
Is CVE-2023-0785 being actively exploited?
Currently, there is no information indicating that CVE-2023-0785 is being actively exploited in the wild.