CVE-2023-37627

CWE-89 — SQL Injection3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.0%
top 93.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Code-projects Online Restaurant Management System
Timeline
PublishedJul 12

Description

Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection. Through SQL injection, an attacker can bypass the admin panel and view order records, add items, delete items etc.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
CVE-2023-37627: Code-projects Online Restaurant Management System 1↗2023-07-12
▶
GHSA
GHSA-cccw-mq2x-rw73: Code-projects Online Restaurant Management System 1↗2023-07-12
▶
CVE-2023-37627 (CRITICAL CVSS 9.8) | Code-projects Online Restaurant Man | cvebase.io