CVE-2023-4844 - SourceCodester Simple Membership System club_edit_query.php sql injection

Back Back to CVE browser

HIGH

SourceCodester Simple Membership System club_edit_query.php sql injection

Published Sep 8, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.60%

Description

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been classified as critical. This affects an unknown part of the file club_edit_query.php. The manipulation of the argument club_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239253 was assigned to this vulnerability.

Affected products

Vendor SourceCodester Product Simple Membership System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SourceCodester

Simple Membership System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54685
Advisory
https://github.com/Meizhi-hua/cve/blob/main/Simple-Membership-System%20club_edit_query.php%20has%20Sqlinjection.pdf
exploit
https://vuldb.com/?ctiid.239253
signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.239253
vdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54685		Advisory
https://github.com/Meizhi-hua/cve/blob/main/Simple-Membership-System%20club_edit_query.php%20has%20Sqlinjection.pdf		exploit
https://vuldb.com/?ctiid.239253		signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.239253		vdb-entrytechnical-descriptionThird Party Advisory