CVE-2023-3177: SourceCodester Lost and Found Information System view_inquiry.php sql injection
A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin\inquiries\viewinquiry.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231151.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-3177?
The severity of CVE-2023-3177 is high, with a severity value of 8.8.
How does CVE-2023-3177 affect SourceCodester Lost and Found Information System?
CVE-2023-3177 affects SourceCodester Lost and Found Information System version 1.0.
What is the vulnerability in admin\inquiries\view_inquiry.php?
The vulnerability in admin\inquiries\view_inquiry.php is an SQL injection vulnerability.
Can the attack for CVE-2023-3177 be launched remotely?
Yes, the attack for CVE-2023-3177 can be launched remotely.
How can I fix the SQL injection vulnerability in admin\inquiries\view_inquiry.php?
To fix the SQL injection vulnerability in admin\inquiries\view_inquiry.php, ensure proper input sanitization and use prepared statements or parameterized queries to interact with the database.