PT-2023-19405 · Sourcecodester · Sourcecodester Ac Repair/Services System

Yp1Oneer · Published 2023-04-28 · Updated 2024-05-17 · CVE-2023-2411

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester AC Repair and Services System version 1.0

Description A critical issue affects the processing of the file /admin/inquiries/view inquiry.php, where the manipulation of the id argument leads to sql injection. The attack can be initiated remotely.

Recommendations For SourceCodester AC Repair and Services System version 1.0, consider disabling access to the /admin/inquiries/view inquiry.php file until a patch is available. Restrict the manipulation of the id argument to minimize the risk of sql injection.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-2411

Affected Products

Sourcecodester Ac Repair/Services System

References · 7

• 🔥 https://github.com/Yp1oneer/cve_hub/blob/main/AC%20Repair%20and%20Services%20System/SQL-Injection-4.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2023-2411 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2411 · Security Note
• https://vuldb.com/?id.227705 · Note
• https://t.me/cvenotify/49465 · Telegram Post
• https://t.me/cvenotify/49393 · Telegram Post
• https://vuldb.com/?ctiid.227705 · Note