CVE-2023-4184: fallo de gravedad alta en SourceCodester Inventory Management System
SourceCodester Inventory Management System sell_return.php sql injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.3epss 0.6%
A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file sell_return.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-236219.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Productos afectados
SourceCodester · Inventory Management SystemCVEs relacionadas — SourceCodester Inventory Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-4749MEDIUMSourceCodester Inventory Management System index.php file inclusionEPSS 1.0%CVE-2023-4558MEDIUMSourceCodester Inventory Management System staff_data.php sql injectionEPSS 0.7%CVE-2023-4436MEDIUMSourceCodester Inventory Management System edit_update.php sql injectionEPSS 0.7%CVE-2023-4201MEDIUMSourceCodester Inventory Management System ex_catagory_data.php sql injectionEPSS 0.7%CVE-2023-4200MEDIUMSourceCodester Inventory Management System product_data.php. sql injectionEPSS 0.7%CVE-2023-4438MEDIUMSourceCodester Inventory Management System search_sales_report.php sql injectionEPSS 0.7%