ByteOS Network

NVD Vulnerability Details :

CVE-2023-0986

Modified

Source-cna@vuldb.com

Published At-23 Feb, 2023 | 16:15

Updated At-17 May, 2024 | 02:17

A vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. This affects an unknown part of the file admin/?page=user/manage_user of the component Edit User. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-221679.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	6.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Secondary	2.0	6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P

CPE Matches

sales_tracker_management_system_project>>sales_tracker_management_system>>1.0

cpe:2.3:a:sales_tracker_management_system_project:sales_tracker_management_system:1.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-89	Primary	cna@vuldb.com

References

Hyperlink	Source	Resource
https://vuldb.com/?ctiid.221679	cna@vuldb.com	Permissions Required Third Party Advisory VDB Entry
https://vuldb.com/?id.221679	cna@vuldb.com	Permissions Required Third Party Advisory VDB Entry

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History