CVE-2023-5580: SourceCodester Library System index.php sql injection
First published: Sat Oct 14 2023(Updated: )
A vulnerability classified as critical has been found in SourceCodester Library System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-242145 was assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| code-projects Library System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-5580?
CVE-2023-5580 is a critical vulnerability found in SourceCodester Library System 1.0 that allows for remote SQL injection attacks.
How severe is CVE-2023-5580?
CVE-2023-5580 has a severity rating of 9.8, which is classified as critical.
What software is affected by CVE-2023-5580?
SourceCodester Library System 1.0 is affected by CVE-2023-5580.
How can the CVE-2023-5580 vulnerability be exploited?
The CVE-2023-5580 vulnerability can be exploited remotely by manipulating the 'category' argument to perform SQL injection attacks.
Is there a fix for CVE-2023-5580?
Currently, there is no information available about a fix for CVE-2023-5580. It is recommended to apply any official patches or updates provided by the software vendor if they become available.
- agent/type
- agent/references
- agent/weakness
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/description
- agent/severity
- agent/title
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/source
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/library system project
- canonical/code-projects library system
- version/code-projects library system/1.0