CVE-2023-3177
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
A critical vulnerability has been found in SourceCodester Lost and Found Information System version 1.0, affecting an unknown functionality of the file admin\inquiries\view_inquiry.php. Manipulation of this functionality leads to SQL injection.
Risk Assessment
An attacker can remotely exploit this vulnerability, posing a serious threat to the security of data within the organization.
Recommendation
It is recommended to immediately update the system to the latest version or apply appropriate patches to mitigate the risk of an attack.
Original NVD description (English source)
A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin\inquiries\view_inquiry.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231151.