CVE-2023-3145 - SourceCodester Online Discussion Forum Site sql injection

Back Back to CVE browser

HIGH

SourceCodester Online Discussion Forum Site sql injection

Published Jun 7, 2023

8.8

HIGH

CVSS 3.1

EPSS 0.78%

Description

A vulnerability, which was classified as critical, has been found in SourceCodester Online Discussion Forum Site 1.0. Affected by this issue is some unknown functionality of the file classes\Users.php?f=registration. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-231014 is the identifier assigned to this vulnerability.

Affected products

Vendor SourceCodester Product Online Discussion Forum Site Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SourceCodester

Online Discussion Forum Site

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-43829
Advisory
https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#9sql-injection-vulnerability-in-classesusersphppost
exploitThird Party Advisory
https://vuldb.com/?ctiid.231014
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.231014
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-43829		Advisory
https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#9sql-injection-vulnerability-in-classesusersphppost		exploitThird Party Advisory
https://vuldb.com/?ctiid.231014		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.231014		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry