Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-2652

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file /classes/Master.php?f=delete_item. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228780.

Published

2023-05-11T09:15:09.313

Last Modified

2024-11-21T07:59:00.557

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

8.0

Impact Score

6.4

Weaknesses

Type: Secondary
CWE-89

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	oretnom23	lost_and_found_information_system	1.0	Yes

References

https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Lost-and-Found-Information-System---Multiple-SQL-injections.md#2classesmasterphpfdelete_item Exploit, Third Party Advisory ([email protected])
https://vuldb.com/?ctiid.228780 Third Party Advisory ([email protected])
https://vuldb.com/?id.228780 Third Party Advisory ([email protected])
https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Lost-and-Found-Information-System---Multiple-SQL-injections.md#2classesmasterphpfdelete_item Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?ctiid.228780 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?id.228780 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)