CVE-2023-2210
published 2023-04-21CVE-2023-2210: A vulnerability has been found in Campcodes Coffee Shop POS System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality…
PriorityP344high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.61%
44.5th percentile
A vulnerability has been found in Campcodes Coffee Shop POS System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/categories/view_category.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226975.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| campcodes | coffee_shop_pos_system | — | — |
| coffee_shop_pos_system_project | coffee_shop_pos_system | — | — |
| msrc | microsoft_edge | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
vendor_msrc8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-qvjj-36wg-8jh8: A vulnerability has been found in Campcodes Coffee Shop POS System 1
ghsa_unreviewed·2023-04-21
CVE-2023-2210 [MEDIUM] CWE-89 GHSA-qvjj-36wg-8jh8: A vulnerability has been found in Campcodes Coffee Shop POS System 1
A vulnerability has been found in Campcodes Coffee Shop POS System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/categories/view_category.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-226975.
Microsoft
Chromium: CVE-2023-7024 Heap buffer overflow in WebRTC
vendor_msrc·2023-12-12·CVSS 8.8
CVE-2023-7024 [HIGH] Chromium: CVE-2023-7024 Heap buffer overflow in WebRTC
Chromium: CVE-2023-7024 Heap buffer overflow in WebRTC
Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Google is aware that an exploit for CVE-2023-7024 exists in the wild.
FAQ: What is the version information for this release?
Microsoft Edge Version
Date Released
Based on Chromium Version
120.0.2210.91
12/21/2023
120.0.6099.130
FAQ: Why is this Chrome CVE included in the Security Update Guide?
The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-bas
Microsoft
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
vendor_msrc·2023-12-12·CVSS 4.3
CVE-2023-38174 [MEDIUM] Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
FAQ: According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?
Exploitation of this vulnerability only discloses limited information, no sensitive information can be obtained.
FAQ: According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
The user would have to click on a specially crafted URL to be compromised by the attacker.
FAQ: What is the version information for this release?
Microsoft Edge Version
Date Released
Based on Chromium Version
120.0.2210.61
12/7/2023
120.0.6099.62/.63
Microsoft Edge (Chromium-based): Microsoft Edge (Chromium-based)
M
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%202.pdfhttps://vuldb.com/?ctiid.226975https://vuldb.com/?id.226975https://github.com/E1CHO/cve_hub/blob/main/Coffee%20Shop%20POS%20System/Coffee%20Shop%20POS%20System%20-%20vuln%202.pdfhttps://vuldb.com/?ctiid.226975https://vuldb.com/?id.226975
2023-04-21
Published