CVE-2023-37689
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
A SQL injection vulnerability was discovered in the Booking Request page of Maid Hiring Management System v1.0. It allows an attacker to manipulate database queries.
Risk Assessment
An attacker can gain unauthorized access to data, including personal information of clients and employees, potentially leading to a breach of confidentiality and system integrity.
Recommendation
Immediately update the system to the latest version or apply a patch that fixes the SQL injection vulnerability. Additionally, validate and sanitize all user inputs.
Other vulnerabilities in Maid Hiring Management System
See all- CVE-2023-37690Medium
Maid Hiring Management System v1.0 has a SQL injection vulnerability in the Search Maid page. Attackers can exploit this flaw to manipulate database queries.
- CVE-2023-37688Medium
A SQL injection vulnerability was discovered in the Admin page of Maid Hiring Management System v1.0. This allows an attacker to manipulate database queries.
Original NVD description (English source)
Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Booking Request page.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS