CVE-2023-1738: SourceCodester Young Entrepreneur E-Negosyo System sql injection

Published Mar 30, 2023

Updated

A vulnerability has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0 and classified as critical. This vulnerability affects unknown code of the file index.php?q=product. The manipulation of the argument search leads to sql injection. The attack can be initiated remotely. VDB-224626 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

Young Entrepreneur E-negosyo System Project Young Entrepreneur E-negosyo System=1.0

Event History

Mar 30, 2023

CVE Published

08:31 PM

Data Sourced

08:31 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-1738?

CVE-2023-1738 is classified as a critical vulnerability.

How does CVE-2023-1738 affect the Young Entrepreneur E-Negosyo System?

CVE-2023-1738 affects the code in the file index.php?q=product, allowing for SQL injection through manipulation of the search argument.

What versions of the Young Entrepreneur E-Negosyo System are affected by CVE-2023-1738?

CVE-2023-1738 affects version 1.0 of the Young Entrepreneur E-Negosyo System.

How can I mitigate the risks associated with CVE-2023-1738?

To mitigate the risks of CVE-2023-1738, ensure that input validation and parameterized queries are implemented to prevent SQL injection.

Is there a patch available for CVE-2023-1738?

As of now, there has been no official patch released for CVE-2023-1738, but it is advisable to monitor security updates from the vendor.