CVE-2023-6306: SourceCodester Free and Open Source Inventory Management System member_data.php sql injection

Published Nov 27, 2023

Updated

A vulnerability classified as critical has been found in SourceCodester Free and Open Source Inventory Management System 1.0. Affected is an unknown function of the file /ample/app/ajax/memberdata.php. The manipulation of the argument columns leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-246132.

Affected Software

1 affected component

Mayurik Free And Open Source Inventory Management System=1.0

Event History

Nov 27, 2023

CVE Published

01:00 AM

Data Sourced

01:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-6306?

The severity of CVE-2023-6306 is critical.

How does CVE-2023-6306 affect SourceCodester Free and Open Source Inventory Management System?

CVE-2023-6306 affects SourceCodester Free and Open Source Inventory Management System 1.0.

What is the vulnerability in SourceCodester Free and Open Source Inventory Management System?

The vulnerability in SourceCodester Free and Open Source Inventory Management System is a SQL injection in the member_data.php file.

How can an attacker exploit CVE-2023-6306?

An attacker can exploit CVE-2023-6306 by manipulating the 'columns' argument in the /ample/app/ajax/member_data.php file.

Is there a fix available for CVE-2023-6306?

Yes, a fix is available for CVE-2023-6306. It is recommended to update to a patched version of SourceCodester Free and Open Source Inventory Management System.