CVE-2023-1737: falha de alta gravidade em SourceCodester Young Entrepreneur E-Negosyo…
SourceCodester Young Entrepreneur E-Negosyo System login.php sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.3epss 0.6%
A vulnerability, which was classified as critical, was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument U_USERNAME leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-224625 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
SourceCodester · Young Entrepreneur E-Negosyo SystemCVEs relacionadas — SourceCodester Young Entrepreneur E-Negosyo…
No mesmo produto, das mais perigosas para as menos.
CVE-2023-1734HIGHSourceCodester Young Entrepreneur E-Negosyo System unrestricted uploadEPSS 0.6%CVE-2023-1686LOWSourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scriptingEPSS 0.5%CVE-2023-1485LOWSourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scriptingEPSS 0.5%CVE-2023-1738MEDIUMSourceCodester Young Entrepreneur E-Negosyo System sql injectionEPSS 0.5%CVE-2023-1735MEDIUMSourceCodester Young Entrepreneur E-Negosyo System passwordrecover.php sql injectionEPSS 0.5%CVE-2023-1736MEDIUMSourceCodester Young Entrepreneur E-Negosyo System sql injectionEPSS 0.4%