First published: Sun Jul 23 2023(Updated: )
A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=delete_category of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The identifier VDB-235201 was assigned to this vulnerability.
Credit: cna@vuldb.com cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Lost And Found Information System Project Lost And Found Information System | =1.0 | |
Oretnom23 Lost And Found Information System | =1.0 | |
=1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2023-3850 is critical with a score of 9.8 out of 10.
The affected software of CVE-2023-3850 is SourceCodester Lost and Found Information System 1.0 and Oretnom23 Lost and Found Information System 1.0.
The CWE ID of CVE-2023-3850 is 89.
To fix CVE-2023-3850, you should apply the latest security patch or update provided by the software vendor.
You can find more information about CVE-2023-3850 at the following references: [Link1](https://vuldb.com/?ctiid.235201) and [Link2](https://vuldb.com/?id.235201).