PT-2023-19405 · Sourcecodester · Sourcecodester Ac Repair/Services System

Yp1Oneer · Publicado 2023-04-28 · Atualizado 2024-05-17 · CVE-2023-2411

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester AC Repair and Services System version 1.0

Description A critical issue affects the processing of the file /admin/inquiries/view inquiry.php, where the manipulation of the id argument leads to sql injection. The attack can be initiated remotely.

Recommendations For SourceCodester AC Repair and Services System version 1.0, consider disabling access to the /admin/inquiries/view inquiry.php file until a patch is available. Restrict the manipulation of the id argument to minimize the risk of sql injection.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2023-2411

Produtos afetados

Sourcecodester Ac Repair/Services System

Referências · 7

• 🔥 https://github.com/Yp1oneer/cve_hub/blob/main/AC%20Repair%20and%20Services%20System/SQL-Injection-4.pdf · Exploit
• https://vuldb.com/?id.227705 · Nota
• https://t.me/cvenotify/49465 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-2411 · Aviso do Fabricante
• https://t.me/cvenotify/49393 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-2411 · Nota de Segurança
• https://vuldb.com/?ctiid.227705 · Nota