CVE-2023-46022: SQL Injection

Published Nov 14, 2023

Updated

SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via the 'bid' parameter.

Credit

Ersin Erenler

Affected Software

1 affected component

Code-projects Blood Bank=1.0

Event History

Nov 14, 2023

CVE Published

12:00 AM

Data Sourced

12:00 AM

Description

Mar 20, 2024

Exploit Published

via ExploitDB·12:00 AM

Known Exploited

via ExploitDB·12:00 AM

Frequently Asked Questions

What is CVE-2023-46022?

CVE-2023-46022 is a SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 that allows attackers to run arbitrary SQL commands via the 'bid' parameter.

What is the severity of CVE-2023-46022?

The severity of CVE-2023-46022 is high with a CVSS score of 7.8.

How does CVE-2023-46022 affect Code-Projects Blood Bank?

CVE-2023-46022 affects Code-Projects Blood Bank 1.0 by allowing attackers to run arbitrary SQL commands through a SQL Injection vulnerability in delete.php.

How can I fix the SQL Injection vulnerability in Code-Projects Blood Bank?

To fix the SQL Injection vulnerability in Code-Projects Blood Bank, update to a patched version of the software or apply the necessary security patches provided by the vendor.

Where can I find more information about CVE-2023-46022?

You can find more information about CVE-2023-46022 on the official CVE website or by referring to the provided reference link.