CVE-2023-7155: SourceCodester Free and Open Source Inventory Management System edit_product.php sql injection

Published Dec 29, 2023

Updated

A vulnerability, which was classified as critical, was found in SourceCodester Free and Open Source Inventory Management System 1.0. This affects an unknown part of the file /ample/app/action/editproduct.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249177 was assigned to this vulnerability.

Affected Software

1 affected component

Mayurik Free And Open Source Inventory Management System=1.0

Event History

Dec 29, 2023

CVE Published

05:00 AM

Data Sourced

05:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-7155?

CVE-2023-7155 is classified as a critical vulnerability.

How does CVE-2023-7155 affect the software?

CVE-2023-7155 allows for SQL injection through manipulation of the argument id in the edit_product.php file.

Which software versions are affected by CVE-2023-7155?

CVE-2023-7155 specifically affects SourceCodester Free and Open Source Inventory Management System version 1.0.

How can I mitigate the risks associated with CVE-2023-7155?

To mitigate CVE-2023-7155, validate and sanitize user inputs to prevent SQL injection attacks.

What are the potential implications of exploiting CVE-2023-7155?

Exploiting CVE-2023-7155 could allow attackers to execute arbitrary SQL commands, potentially compromising the database.