SourceCodester Canteen Management System createuser.php query sql injection
CVE-2023-1475

9.8CRITICAL

Key Information:

Vendor
SourceCodester
Status
Canteen Management System
Vendor
CVE Published:
17 March 2023

Summary

A vulnerability has been identified in the SourceCodester Canteen Management System 1.0 that allows for SQL injection through the manipulation of the 'uemail' argument in the createuser.php file. This flaw can be exploited remotely, potentially allowing attackers to access sensitive data or manipulate database queries. The public disclosure of this vulnerability makes it vital for users of this system to implement appropriate security measures to safeguard their applications.

Affected Version(s)

Canteen Management System 1.0

References

https://vuldb.com/?id.223337
vdb-entrytechnical-description
https://vuldb.com/?ctiid.223337
signaturepermissions-required
https://blog.csdn.net/weixin_43864034/article/details/129...
broken-linkexploit

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

faith (VulDB User)
.