CVE-2023-3619
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
A critical vulnerability was found in SourceCodester AC Repair and Services System version 1.0. The issue affects unknown processing of the file Master.php?f=save_service in the HTTP POST Request Handler component, leading to SQL injection.
Risk Assessment
An attacker may remotely exploit this vulnerability, posing a serious threat to the integrity of the organization's database.
Recommendation
It is recommended to immediately update the system to the latest version or apply security patches to minimize the risk of an attack.
Original NVD description (English source)
A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This issue affects some unknown processing of the file Master.php?f=save_service of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The identifier VDB-233573 was assigned to this vulnerability.