CVE-2023-4449

CWE-89 — SQL Injection3 documents3 sources
Severity
8.8HIGH
EPSS
0.1%
top 83.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Free AND Open Source Inventory Management SystemInventory Management System Project Inventory Management System
Timeline
PublishedAug 21

Description

A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php?page=member. The manipulation of the argument columns[0][data] leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-237570 is the identifier assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-qq6h-h8q7-3pg5: A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1↗2023-08-21
▶
CVEList
SourceCodester Free and Open Source Inventory Management System sql injection↗2023-08-21
▶
CVE-2023-4449 (HIGH CVSS 8.8) | A vulnerability was found in Source | cvebase.io