CVE-2023-6312: SourceCodester Loan Management System Users Page deleteUser.php delete_user sql injection
A vulnerability was found in SourceCodester Loan Management System 1.0. It has been classified as critical. Affected is the function deleteuser of the file deleteUser.php of the component Users Page. The manipulation of the argument userid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-246138 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-6312 vulnerability?
CVE-2023-6312 is a critical SQL injection vulnerability found in the SourceCodester Loan Management System 1.0, specifically in the deleteUser.php file of the Users Page component.
What is the severity of CVE-2023-6312?
CVE-2023-6312 has a severity rating of 7.2, which is considered high.
How does the SQL injection vulnerability in deleteUser.php (CVE-2023-6312) occur?
The SQL injection vulnerability in deleteUser.php (CVE-2023-6312) occurs due to the manipulation of the user_id argument.
What is the affected software for CVE-2023-6312?
The affected software for CVE-2023-6312 is the SourceCodester Loan Management System 1.0.
Is there a fix available for CVE-2023-6312?
It is recommended to apply the latest patch or update provided by the vendor to fix the SQL injection vulnerability in deleteUser.php (CVE-2023-6312).