CVE-2023-5272mediumCWE-89

CVE-2023-5272: fallo de gravedad media en SourceCodester Best Courier Management System

SourceCodester Best Courier Management System GET Parameter edit_parcel.php sql injection

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Best Courier Management System

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.5epss 0.8%
A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. This affects an unknown part of the file edit_parcel.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-240885 was assigned to this vulnerability.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Productos afectados
SourceCodester · Best Courier Management System
CVEs relacionadas — SourceCodester Best Courier Management System

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-4945MEDIUMSourceCodester Best Courier Management System view_parcel.php unrestricted uploadEPSS 0.9%CVE-2023-5269MEDIUMSourceCodester Best Courier Management System GET Parameter parcel_list.php sql injectionEPSS 0.8%CVE-2023-5271MEDIUMSourceCodester Best Courier Management System edit_parcel.php sql injectionEPSS 0.8%CVE-2023-5270MEDIUMSourceCodester Best Courier Management System view_parcel.php sql injectionEPSS 0.8%CVE-2023-6898MEDIUMSourceCodester Best Courier Management System manage_user.php sql injectionEPSS 0.6%CVE-2023-5302LOWSourceCodester Best Courier Management System Manage Account Page cross site scriptingEPSS 0.6%