PHPGurukul Bank Locker Management System Login index.php sql injection
CVE-2023-0562

7.3HIGH

Key Information:

Vendor

PHPgurukul
Status
Bank Locker Management System
Vendor
CVE Published:
28 January 2023

What is CVE-2023-0562?

A SQL injection vulnerability exists in the PHPGurukul Bank Locker Management System 1.0, specifically within the index.php file of the Login component. By manipulating the 'username' parameter, an attacker can exploit this flaw, potentially allowing unauthorized access to the application's database. This vulnerability can be exploited remotely, making it essential for users to update their systems to prevent possible exploitation.

Affected Version(s)

Bank Locker Management System 1.0

References

https://vuldb.com/?id.219716
vdb-entrytechnical-description
https://vuldb.com/?ctiid.219716
signaturepermissions-required
https://github.com/ctflearner/Vulnerability/blob/main/Ban...
exploit

EPSS Score

81% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Affan (VulDB User)
JSON
.