CVE-2023-4201

MediumCVSS 6.3

Published: 07/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.65%

46th percentile - higher than 46% of all known CVEs

Summary

A critical vulnerability was found in SourceCodester Inventory Management System version 1.0. The issue affects some unknown processing of the file ex_catagory_data.php, leading to SQL injection.

Risk Assessment

An attacker may remotely exploit this vulnerability, posing a serious threat to the security of data within the organization.

Recommendation

It is recommended to immediately update the system to the latest version to eliminate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file ex_catagory_data.php. The manipulation of the argument columns[1][data] leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-236291.