CVE-2023-4201: SourceCodester Inventory Management System ex_catagory_data.php sql injection

Published Aug 7, 2023

Updated

A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file excatagorydata.php. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-236291.

Affected Software

1 affected component

Mayurik Inventory Management System=1.0

Event History

Aug 7, 2023

CVE Published

via MITRE·07:31 PM

Data Sourced

via MITRE·07:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2023-4201.

What is the severity of CVE-2023-4201?

CVE-2023-4201 has a severity rating of critical.

What is the affected software?

The affected software is Mayurik Inventory Management System 1.0.

What is the risk associated with CVE-2023-4201?

CVE-2023-4201 poses a high risk due to the potential for remote SQL injection attacks.

How can I fix CVE-2023-4201?

To fix CVE-2023-4201, apply the latest patch or update provided by the software vendor.