CVE-2023-1735

published 2023-03-30

CVE-2023-1735: A vulnerability classified as critical was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this vulnerability is an unknown…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

A vulnerability classified as critical was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this vulnerability is an unknown functionality of the file passwordrecover.php. The manipulation of the argument phonenumber leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-224623.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sourcecodester	young_entrepreneur_e-negosyo_system	—	—
young_entrepreneur_e-negosyo_system_project	young_entrepreneur_e-negosyo_system	—	—

CWE-89