SourceCodester Task Reminder System Master.php sql injection
CVE-2023-2150

7.2HIGH

Key Information:

Vendor

SourceCodester
Status
Task Reminder System
Vendor
CVE Published:
18 April 2023

What is CVE-2023-2150?

A security flaw has been identified in the SourceCodester Task Reminder System version 1.0, which allows for SQL injection through improper handling of the 'id' argument in the Master.php file. Attackers can exploit this vulnerability remotely, potentially leading to unauthorized access and manipulation of the database. As this issue has been publicly disclosed, it is crucial for users to apply the necessary patches and updates as soon as they are available to safeguard their systems.

Affected Version(s)

Task Reminder System 1.0

References

https://vuldb.com/?id.226271
vdb-entrytechnical-description
https://vuldb.com/?ctiid.226271
signaturepermissions-required
https://youtu.be/o46oHLvY2-E
media-coverage

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Gab3 (VulDB User)
.