Campcodes Video Sharing Website signup.php sql injection
CVE-2023-2035
7.5HIGH
Summary
A vulnerability exists in Campcodes Video Sharing Website 1.0 due to improper handling of input within the signup.php file, allowing attackers to exploit the arguments leading to SQL injection. This security flaw enables unauthorized users to execute malicious SQL statements, compromising database integrity and potentially exposing sensitive information. The remote nature of the attack means that a threat actor can exploit this vulnerability from anywhere, increasing the risk of data breaches. It is crucial for users of the affected product to apply security patches and follow best practices to mitigate the risks associated with this vulnerability.
Affected Version(s)
Video Sharing Website 1.0
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
SSL_Seven_Security Lab_WangZhiQiang_ZhangYing (VulDB User)