CVE-2023-1366

CWE-89 — SQL InjectionCWE-7725 documents5 sources
Severity
7.2HIGH
EPSS
0.3%
top 45.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Yoga Class Registration SystemYoga Class Registration System Project Yoga Class Registration System
Timeline
PublishedMar 13
Latest updateDec 9

Description

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. This affects the function query of the file admin/categories/manage_category.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222873 was assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages2 packages

🔴Vulnerability Details

3
OSV
perf tool x86: Fix perf_env memory leak↗2025-12-09
▶
CVEList
SourceCodester Yoga Class Registration System manage_category.php query sql injection↗2023-03-13
▶
GHSA
GHSA-xjfg-q3x7-vhvm: A vulnerability was found in SourceCodester Yoga Class Registration System 1↗2023-03-13
▶

📋Vendor Advisories

1
Red Hat
kernel: perf tool x86: Fix perf_env memory leak↗2025-12-09
▶
CVE-2023-1366 (HIGH CVSS 7.2) | A vulnerability was found in Source | cvebase.io