CVE-2023-3657: SourceCodester AC Repair and Services System HTTP POST Request sql injection
First published: Thu Jul 13 2023(Updated: )
A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. This issue affects some unknown processing of the file Master.php?f=save_book of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-234011.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Ac Repair And Services System | =1.0 | |
| =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-3657?
The severity of CVE-2023-3657 is critical with a score of 9.8.
How does CVE-2023-3657 affect SourceCodester AC Repair and Services System 1.0?
CVE-2023-3657 affects SourceCodester AC Repair and Services System 1.0 through a SQL injection vulnerability in the file Master.php?f=save_book of the component HTTP POST Request Handler.
How can I exploit the vulnerability in CVE-2023-3657?
As a cybersecurity analyst, I cannot provide guidance on exploiting vulnerabilities. It is important to focus on mitigating and patching the vulnerability.
Is there a patch available for CVE-2023-3657?
It is recommended to check with the vendor of SourceCodester AC Repair and Services System 1.0 for any available patches or updates to address CVE-2023-3657.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2023-3657?
The Common Weakness Enumeration (CWE) ID associated with CVE-2023-3657 is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command).
- collector/nvd-latest
- collector/nvd-index
- agent/author
- agent/references
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/severity
- agent/title
- agent/description
- agent/softwarecombine
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/oretnom23
- canonical/oretnom23 ac repair and services system
- version/oretnom23 ac repair and services system/1.0