SourceCodester Sales Tracker Management System view_product.php sql injection

CVE-2023-0964

What is CVE-2023-0964?

A SQL injection vulnerability exists in the SourceCodester Sales Tracker Management System version 1.0, specifically in the 'view_product.php' file located in the admin/products directory. The vulnerability is triggered by improper handling of the 'id' parameter, allowing attackers to manipulate SQL queries and execute arbitrary commands on the database. This exploitation can occur remotely, making it a significant concern for system administrators. Although the complexity of executing the attack is relatively high, successful exploitation could lead to unauthorized data exposure and system compromise.

References