CVE-2023-5794

Опубликовано: 26 окт. 2023

Источник: nvd

CVSS3: 7.3

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

A vulnerability was found in PHPGurukul Online Railway Catering System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-243600.

Ссылки

https://github.com/JacksonStonee/Online-Railway-Catering-System-1.0-has-a-SQL-injection-vulnerability-in-index.php/tree/main
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.243600
Third Party Advisory
https://vuldb.com/?id.243600
Third Party Advisory
https://github.com/JacksonStonee/Online-Railway-Catering-System-1.0-has-a-SQL-injection-vulnerability-in-index.php/tree/main
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.243600
Third Party Advisory
https://vuldb.com/?id.243600
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:phpgurukul:online_railway_catering_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 15%

0.00048

Низкий

7.3 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-7q3h-8qj3-hh33

CVSS3: 7.3

github

больше 2 лет назад

EPSS

Процентиль: 15%

0.00048

Низкий

7.3 High

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89