CVE-2023-3657
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
A critical vulnerability has been found in SourceCodester AC Repair and Services System version 1.0, affecting unknown processing of the file Master.php?f=save_book in the HTTP POST Request Handler component. Manipulation of the argument id leads to SQL injection.
Risk Assessment
An attacker may remotely exploit this vulnerability, posing a serious threat to the integrity of the database and the confidentiality of user data.
Recommendation
It is recommended to immediately update the system to the latest version to eliminate this vulnerability and implement additional security measures to protect against SQL injections.
Original NVD description (English source)
A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. This issue affects some unknown processing of the file Master.php?f=save_book of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-234011.