CVE-2023-46582

Опубликовано: 14 нояб. 2023

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component.

Ссылки

https://github.com/ersinerenler/Code-Projects-Inventory-Management-1.0/blob/main/CVE-2023-46582-Code-Projects-Inventory-Management-1.0-SQL-Injection-Vulnerability.md
Exploit
Product
Third Party Advisory
https://github.com/ersinerenler/Code-Projects-Inventory-Management-1.0/blob/main/CVE-2023-46582-Code-Projects-Inventory-Management-1.0-SQL-Injection-Vulnerability.md
Exploit
Product
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:code-projects:inventory_management:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00075

Низкий

7.8 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-rg35-5rq5-xx9x