← volver
CVE-2023-0938

SourceCodester Music Gallery Site GET Request music_list.php sql injection

CVSS 6.3 MEDIUMEPSS 1.8%CWE-89
A vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0. This affects an unknown part of the file music_list.php of the component GET Request Handler. The manipulation of the argument cid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-221553 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Productos afectados
SourceCodester · Music Gallery Site
PoCs públicas encontradas — 2
cve_referencegithub.com/navaidzansari/CVE_Demo/blob/main/2023/Music%20Gallery%20Site%20-%20SQL%20Injection%201.mdno verificadoexploitdbwww.exploit-db.com/exploits/51288no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Music%20Gallery%20Site%20-%20SQL%20Injection%201.mdhttps://vuldb.com/?ctiid.221553https://vuldb.com/?id.221553