CVE-2023-37689

MediumCVSS 4.8

Published: 08/08/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

33th percentile - higher than 33% of all known CVEs

Summary

A SQL injection vulnerability was discovered in the Booking Request page of Maid Hiring Management System v1.0. It allows an attacker to manipulate database queries.

Risk Assessment

An attacker can gain unauthorized access to data, including personal information of clients and employees, potentially leading to a breach of confidentiality and system integrity.

Recommendation

Immediately update the system to the latest version or apply a patch that fixes the SQL injection vulnerability. Additionally, validate and sanitize all user inputs.

Original NVD description (English source)

Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Booking Request page.