CVE-2023-1793

· MEDIUMModified

← All CVEs

CVSS v3.1

6.3

EPSS

0.73%

Published

Apr 2, 2023

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability was found in SourceCodester Police Crime Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /officer/assigncase.php of the component GET Parameter Handler. The manipulation of the argument caseid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224745 was assigned to this vulnerability.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-89CWE-89

Affected Products (1)

police_crime_record_management_system_project · police_crime_record_management_systemvulnerable

References (6)

https://github.com/fillorkill/bug_report/blob/main/SQLi-1.md

ExploitThird Party Advisory

https://vuldb.com/?ctiid.224745

Permissions RequiredThird Party Advisory

https://vuldb.com/?id.224745