CVE-2023-1962: SourceCodester Best Online News Portal POST Parameter forgot-password.php sql injection
A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225361 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1962?
CVE-2023-1962 is classified as a critical vulnerability.
How do I fix CVE-2023-1962?
To fix CVE-2023-1962, update to the latest version of Best Online News Portal that addresses this vulnerability.
What components are affected by CVE-2023-1962?
CVE-2023-1962 affects the POST Parameter Handler functionality in the /admin/forgot-password.php file.
What causes CVE-2023-1962 vulnerability?
CVE-2023-1962 is caused by improper handling of the username parameter leading to potential unauthorized access.
Which software version is impacted by CVE-2023-1962?
CVE-2023-1962 specifically impacts version 1.0 of the Best Online News Portal.