CVE-2023-51951: SQL Injection
Published Feb 5, 2024
·Updated
SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute arbitrary code via the id parameter in the managebo.php file.
Affected Software
1 affected component
Stock Management System Project Stock Management System=1.0
Event History
Feb 5, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-51951?
CVE-2023-51951 has a high severity rating due to its potential for remote code execution via SQL injection.
2
How do I fix CVE-2023-51951?
To fix CVE-2023-51951, validate and sanitize user input for the id parameter in manage_bo.php.
3
Who is affected by CVE-2023-51951?
CVE-2023-51951 affects users and administrators of Stock Management System version 1.0.
4
What type of attack does CVE-2023-51951 allow?
CVE-2023-51951 allows remote attackers to execute arbitrary SQL commands via the id parameter.
5
Is CVE-2023-51951 easy to exploit?
Yes, CVE-2023-51951 is relatively easy to exploit if proper input validation is not implemented.