CVE-2023-1738

Опубликовано: 30 мар. 2023

Источник: nvd

CVSS3: 6.3

CVSS3: 9.8

CVSS2: 6.5

EPSS Низкий

Описание

A vulnerability has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0 and classified as critical. This vulnerability affects unknown code of the file index.php?q=product. The manipulation of the argument search leads to sql injection. The attack can be initiated remotely. VDB-224626 is the identifier assigned to this vulnerability.

Ссылки

https://vuldb.com/?ctiid.224626
Third Party Advisory
https://vuldb.com/?id.224626
Third Party Advisory
https://vuldb.com/?ctiid.224626
Third Party Advisory
https://vuldb.com/?id.224626
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:young_entrepreneur_e-negosyo_system_project:young_entrepreneur_e-negosyo_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 18%

0.00056

Низкий

6.3 Medium

CVSS3

9.8 Critical

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-9f9q-53rx-29xj

CVSS3: 9.8

github

почти 3 года назад

EPSS

Процентиль: 18%

0.00056

Низкий

6.3 Medium

CVSS3

9.8 Critical

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89