CVE Catalog

CVE-2023-37688

MediumCVSS 4.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.41%

33th percentile - higher than 33% of all known CVEs

Summary

A SQL injection vulnerability was discovered in the Admin page of Maid Hiring Management System v1.0. This allows an attacker to manipulate database queries.

Risk Assessment

An attacker can gain unauthorized access to sensitive data, including passwords and user information, leading to confidentiality and integrity breaches.

Recommendation

Immediately update the system to the latest version or apply a patch that fixes the SQL injection vulnerability. Additionally, implement input validation and parameterized queries.

Original NVD description (English source)

Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Admin page.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS