CVE-2023-1984: SourceCodester Complaint Management System POST Parameter check_availability.php sql injection

Published Apr 11, 2023

Updated

A vulnerability classified as critical was found in SourceCodester Complaint Management System 1.0. This vulnerability affects unknown code of the file /users/checkavailability.php of the component POST Parameter Handler. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225532.

Affected Software

1 affected component

Complaint Management System Project Complaint Management System=1.0

Event History

Apr 11, 2023

CVE Published

05:31 PM

Data Sourced

05:31 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-1984?

CVE-2023-1984 is classified as a critical vulnerability.

How does CVE-2023-1984 affect the Complaint Management System?

CVE-2023-1984 allows for SQL injection via the email parameter in the /users/check_availability.php file.

How can I fix CVE-2023-1984?

To fix CVE-2023-1984, ensure that user inputs are properly sanitized and validated to prevent SQL injection.

Which version of the Complaint Management System is affected by CVE-2023-1984?

CVE-2023-1984 affects version 1.0 of the Complaint Management System.

What component is vulnerable in CVE-2023-1984?

The vulnerability in CVE-2023-1984 affects the POST Parameter Handler of the Complaint Management System.