CVE-2023-3177
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
A critical vulnerability has been found in SourceCodester Lost and Found Information System version 1.0, affecting an unknown functionality of the file admin\inquiries\view_inquiry.php. Manipulation of this functionality leads to SQL injection.
Risk Assessment
An attacker can remotely exploit this vulnerability, posing a serious threat to the security of data within the organization.
Recommendation
It is recommended to immediately update the system to the latest version or apply appropriate patches to mitigate the risk of an attack.
Other vulnerabilities in SourceCodester Lost and Found Information System 1.0
See all- CVE-2023-3680Medium
A critical vulnerability has been found in the Lost and Found Information System version 1.0, affecting an unknown part of the file /classes/Master.php?f=save_item. Manipulation of the argument id leads to SQL injection.
- CVE-2023-3176Medium
A critical vulnerability was found in the Lost and Found Information System version 1.0, allowing SQL injection through manipulation of the id argument in the admin\user\manage_user.php file.
- CVE-2023-3018Medium
A critical vulnerability was found in the Lost and Found Information System version 1.0, affecting unknown code in the file /admin/?page=user/list. Manipulation of this code leads to improper access controls.
Original NVD description (English source)
A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin\inquiries\view_inquiry.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231151.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS