CVE-2023-2668: SourceCodester Lost and Found Information System GET Parameter manager_category sql injection
First published: Fri May 12 2023(Updated: )
A vulnerability was found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this issue is the function manager_category of the file admin/?page=categories/manage_category of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228884.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Lost And Found Information System | =1.0 | |
| =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-2668?
The severity of CVE-2023-2668 is critical with a CVSS score of 9.8.
How does CVE-2023-2668 affect SourceCodester Lost and Found Information System?
CVE-2023-2668 affects the function manager_category in the file admin/?page=categories/manage_category of SourceCodester Lost and Found Information System 1.0.
What is the affected component of CVE-2023-2668?
The affected component of CVE-2023-2668 is the GET Parameter Handler.
What is the CWE of CVE-2023-2668?
The CWE of CVE-2023-2668 is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
Is there a fix available for CVE-2023-2668?
Currently, there is no known fix available for CVE-2023-2668. It is recommended to follow the vendor's advisory and apply any suggested mitigations.
- collector/nvd-index
- agent/author
- agent/type
- agent/first-publish-date
- agent/title
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/oretnom23
- canonical/oretnom23 lost and found information system
- version/oretnom23 lost and found information system/1.0