CVE-2023-1737: SourceCodester Young Entrepreneur E-Negosyo System login.php sql injection

Published Mar 30, 2023

Updated

A vulnerability, which was classified as critical, was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument UUSERNAME leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-224625 was assigned to this vulnerability.

Affected Software

1 affected component

Young Entrepreneur E-negosyo System Project Young Entrepreneur E-negosyo System=1.0

Event History

Mar 30, 2023

CVE Published

08:00 PM

Data Sourced

08:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-1737?

CVE-2023-1737 is classified as a critical vulnerability.

How does CVE-2023-1737 affect the application?

CVE-2023-1737 allows for SQL injection through manipulation of the U_USERNAME argument in the login.php file.

Can CVE-2023-1737 be exploited remotely?

Yes, CVE-2023-1737 can be exploited remotely by attackers.

What version of the Young Entrepreneur E-Negosyo System is affected by CVE-2023-1737?

CVE-2023-1737 affects version 1.0 of the Young Entrepreneur E-Negosyo System.

How do I fix the vulnerability CVE-2023-1737?

To fix CVE-2023-1737, it is essential to sanitize input data and use prepared statements for database queries.