CVE-2023-7137mediumCWE-89

CVE-2023-7137: medium-severity vulnerability in code-projects Client Details System

code-projects Client Details System HTTP POST Request sql injection

Published · Updated

Follow this CVE+ Monitor Client Details System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.3epss 17%
A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. Affected by this issue is some unknown functionality of the component HTTP POST Request Handler. The manipulation of the argument uemail leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249140.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
code-projects · Client Details System
Related CVEs — code-projects Client Details System

In the same product, most dangerous first.

CVE-2023-7138MEDIUMcode-projects Client Details System HTTP POST Request admin sql injectionEPSS 0.7%CVE-2023-7142MEDIUMcode-projects Client Details System clientview.php sql injectionEPSS 0.6%CVE-2023-7141MEDIUMcode-projects Client Details System update-clients.php sql injectionEPSS 0.6%CVE-2023-7140MEDIUMcode-projects Client Details System manage-users.php sql injectionEPSS 0.6%CVE-2023-7139MEDIUMcode-projects Client Details System HTTP POST Request regester.php sql injectionEPSS 0.6%CVE-2023-7143LOWcode-projects Client Details System regester.php cross site scriptingEPSS 0.5%