A vulnerability classified as critical was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this vulnerability is an unknown functionality of the file passwordrecover.php. The manipulation of the argument phonenumber leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-224623.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?ctiid.224623 | Third Party Advisory |
| https://vuldb.com/?id.224623 | Third Party Advisory |
| https://vuldb.com/?ctiid.224623 | Third Party Advisory |
| https://vuldb.com/?id.224623 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:39
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 6.5
v3 : 6.3 |
| References | () https://vuldb.com/?ctiid.224623 - Third Party Advisory | |
| References | () https://vuldb.com/?id.224623 - Third Party Advisory |
05 Apr 2023, 13:32
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:young_entrepreneur_e-negosyo_system_project:young_entrepreneur_e-negosyo_system:1.0:*:*:*:*:*:*:* | |
| References | (MISC) https://vuldb.com/?ctiid.224623 - Third Party Advisory | |
| References | (MISC) https://vuldb.com/?id.224623 - Third Party Advisory | |
| CWE | CWE-89 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
Young Entrepreneur E-negosyo System Project
Young Entrepreneur E-negosyo System Project young Entrepreneur E-negosyo System |
30 Mar 2023, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-03-30 20:15
Updated : 2024-11-21 07:39
NVD link : CVE-2023-1735
Mitre link : CVE-2023-1735
CVE.ORG link : CVE-2023-1735
JSON object : View
Products Affected
young_entrepreneur_e-negosyo_system_project
- young_entrepreneur_e-negosyo_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')