CVE-2023-46435: SQL Injection
Published Oct 26, 2023
·Updated
Sourcecodester Packers and Movers Management System v1.0 is vulnerable to SQL Injection via mpms/?p=services/viewservice&id.
Affected Software
1 affected component
oretnom23 Packers And Movers Management System=1.0
Event History
Oct 26, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability type of CVE-2023-46435?
The vulnerability type of CVE-2023-46435 is SQL Injection.
2
How can an attacker exploit CVE-2023-46435?
An attacker can exploit CVE-2023-46435 by injecting malicious SQL queries through the 'mpms/?p=services/view_service&id' parameter.
3
What is the severity level of CVE-2023-46435?
The severity level of CVE-2023-46435 is critical with a CVSS score of 9.8.
4
Which software version is affected by CVE-2023-46435?
The software version affected by CVE-2023-46435 is 1.0 of Oretnom23 Packers And Movers Management System.
5
How can I fix the SQL Injection vulnerability in Sourcecodester Packers and Movers Management System v1.0?
To fix the SQL Injection vulnerability in Sourcecodester Packers and Movers Management System v1.0, you should sanitize and validate user input, use prepared statements or parameterized queries, and implement strict input validation.