CVE-2023-2672: SourceCodester Lost and Found Information System GET Parameter view.php sql injection
First published: Fri May 12 2023(Updated: )
A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file items/view.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228888.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Lost And Found Information System | =1.0 | |
| =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-2672?
The severity of CVE-2023-2672 is critical with a rating of 9.8.
How does CVE-2023-2672 affect SourceCodester Lost and Found Information System?
CVE-2023-2672 affects SourceCodester Lost and Found Information System 1.0 by allowing SQL injection through the manipulation of the 'id' parameter in the file items/view.php.
What is the impact of CVE-2023-2672?
The impact of CVE-2023-2672 is a critical vulnerability that allows an attacker to perform SQL injection, potentially leading to unauthorized access, data manipulation, or data leakage.
How can I fix CVE-2023-2672?
To fix CVE-2023-2672, it is recommended to apply the latest security patches or updates provided by the vendor. Additionally, input validation should be implemented to properly sanitize user-controlled input to prevent SQL injection attacks.
Is there any additional information about CVE-2023-2672?
For more information about CVE-2023-2672, you can refer to the following references: [Reference 1](https://vuldb.com/?ctiid.228888) and [Reference 2](https://vuldb.com/?id.228888).
- collector/nvd-index
- agent/author
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/references
- agent/severity
- agent/title
- agent/description
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/oretnom23
- canonical/oretnom23 lost and found information system
- version/oretnom23 lost and found information system/1.0