CVE-2023-4845: SourceCodester Simple Membership System account_edit_query.php sql injection

Published Sep 9, 2023

Updated

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file accounteditquery.php. The manipulation of the argument adminid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-239254 is the identifier assigned to this vulnerability.

Affected Software

1 affected component

Razormist Simple Membership System=1.0

Event History

Sep 9, 2023

CVE Published

via MITRE·07:00 AM

Data Sourced

via MITRE·07:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-4845?

The severity of CVE-2023-4845 is critical.

How does CVE-2023-4845 affect SourceCodester Simple Membership System 1.0?

CVE-2023-4845 affects SourceCodester Simple Membership System 1.0 through a SQL injection vulnerability in the account_edit_query.php file.

Can CVE-2023-4845 be exploited remotely?

Yes, CVE-2023-4845 can be exploited remotely.

What is the Common Weakness Enumeration (CWE) ID of CVE-2023-4845?

The Common Weakness Enumeration (CWE) ID of CVE-2023-4845 is CWE-89.

How can I fix the SQL injection vulnerability in SourceCodester Simple Membership System 1.0?

To fix the SQL injection vulnerability in SourceCodester Simple Membership System 1.0, apply the recommended patch or update provided by the vendor.