CVE-2023-2412: SourceCodester AC Repair and Services System manage_user.php sql injection
First published: Fri Apr 28 2023(Updated: )
A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-227706 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Ac Repair And Services System | =1.0 | |
| =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-2412?
The severity of CVE-2023-2412 is medium.
What is the affected software for CVE-2023-2412?
The affected software for CVE-2023-2412 is Oretnom23 AC Repair and Services System version 1.0.
How does CVE-2023-2412 affect the system?
CVE-2023-2412 allows remote attackers to launch a SQL injection attack by manipulating the 'id' parameter in the /admin/user/manage_user.php file.
What is the Common Weakness Enumeration (CWE) for CVE-2023-2412?
The Common Weakness Enumeration (CWE) for CVE-2023-2412 is CWE-89 (SQL Injection).
How can I fix CVE-2023-2412?
To fix CVE-2023-2412, it is recommended to apply the latest security patches or updates provided by the software vendor.
- collector/nvd-index
- agent/author
- agent/type
- agent/first-publish-date
- agent/title
- agent/severity
- agent/weakness
- agent/references
- agent/softwarecombine
- agent/description
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/oretnom23
- canonical/oretnom23 ac repair and services system
- version/oretnom23 ac repair and services system/1.0