SourceCodester Online Reviewer System GET Parameter user-update.php sql injection

CVE-2023-2596

What is CVE-2023-2596?

A vulnerability has been identified in the SourceCodester Online Reviewer System 1.0 within the user management functionality. An issue in the file located at /reviewer/system/system/admins/manage/users/user-update.php relates to improper handling of the user_id parameter, which can be exploited to perform SQL injection attacks. This can allow remote attackers to manipulate database queries in unexpected ways, potentially exposing sensitive user data and compromising the integrity of the system. Prompt patching is advisable to mitigate any security risks associated with this vulnerability.

References