CVE-2023-7123: SourceCodester Medicine Tracking System sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracking System 1.0. This issue affects some unknown processing of the file /classes/Master.php? f=savemedicine. The manipulation of the argument id/name/description leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249095.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-7123?
CVE-2023-7123 is classified as a critical vulnerability.
How do I fix CVE-2023-7123?
To fix CVE-2023-7123, it is recommended to sanitize and validate inputs in the affected function to prevent SQL injection.
What systems are affected by CVE-2023-7123?
CVE-2023-7123 affects SourceCodester Medicine Tracking System version 1.0.
Can CVE-2023-7123 lead to data loss?
Yes, CVE-2023-7123 can lead to unauthorized data access and potential data loss through SQL injection.
What is the impact of exploiting CVE-2023-7123?
Exploiting CVE-2023-7123 can allow attackers to execute arbitrary SQL queries on the database.