CVE-2023-2346: SourceCodester Service Provider Management System view_inquiry.php sql injection
First published: Thu Apr 27 2023(Updated: )
A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/inquiries/view_inquiry.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227589 was assigned to this vulnerability.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Service Provider Management System | =1.0 | |
| =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-2346?
The severity of CVE-2023-2346 is critical with a score of 9.8.
What is the affected software version of CVE-2023-2346?
The affected software version of CVE-2023-2346 is 1.0.
What is the CWE ID of CVE-2023-2346?
The CWE ID of CVE-2023-2346 is CWE-89.
What is the vulnerability description of CVE-2023-2346?
CVE-2023-2346 is a SQL injection vulnerability in SourceCodester Service Provider Management System 1.0, allowing remote attacks through manipulation of the 'id' parameter in the '/admin/inquiries/view_inquiry.php' file.
How can I fix the vulnerability in CVE-2023-2346?
To fix CVE-2023-2346, it is recommended to apply the latest security patch or update provided by the vendor for SourceCodester Service Provider Management System 1.0.
- collector/nvd-index
- agent/author
- agent/type
- agent/first-publish-date
- agent/references
- agent/severity
- agent/title
- agent/weakness
- agent/softwarecombine
- agent/description
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/oretnom23
- canonical/oretnom23 service provider management system
- version/oretnom23 service provider management system/1.0