CVE-2023-5260: SourceCodester Simple Membership System group_validator.php sql injection
Published Sep 29, 2023
·Updated
A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240869 was assigned to this vulnerability.
Affected Software
1 affected component
Razormist Simple Membership System=1.0
Event History
Sep 29, 2023
CVE Published
via MITRE·12:00 PM
Data Sourced
via MITRE·12:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-5260?
The severity of CVE-2023-5260 is critical with a value of 9.8.
2
How does CVE-2023-5260 affect SourceCodester Simple Membership System?
CVE-2023-5260 affects SourceCodester Simple Membership System 1.0, allowing SQL injection through the manipulation of the club_id argument.
3
Can CVE-2023-5260 be exploited remotely?
Yes, CVE-2023-5260 can be initiated remotely.
4
Is there a fix available for CVE-2023-5260?
Currently, there is no fix available for CVE-2023-5260.
5
What is the CWE ID of CVE-2023-5260?
The CWE ID of CVE-2023-5260 is 89.