Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-0706

Опубликовано: 07 фев. 2023
Источник: nvd
CVSS3: 6.3
CVSS3: 8.8
CVSS2: 6.5
EPSS Низкий

Описание

A vulnerability, which was classified as critical, has been found in SourceCodester Medical Certificate Generator App 1.0. Affected by this issue is some unknown functionality of the file manage_record.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-220340.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:medical_certificate_generator_app_project:medical_certificate_generator_app:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 15%
0.00048
Низкий

6.3 Medium

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

github логотип

GHSA-q56j-mjjc-gjf9

CVSS3: 8.8
github
около 3 лет назад

A vulnerability, which was classified as critical, has been found in SourceCodester Medical Certificate Generator App 1.0. Affected by this issue is some unknown functionality of the file manage_record.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-220340.

fstec логотип

BDU:2023-01083

CVSS3: 8.8
fstec
около 3 лет назад

Уязвимость сценария manage_record.php веб-приложения для создания медицинских справок Medical Certificate Generator App, позволяющая нарушителю выполнить произвольный SQL-код

EPSS

Процентиль: 15%
0.00048
Низкий

6.3 Medium

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89