SourceCodester Covid-19 Contact Tracing System manage.php sql injection

CVE-2023-2677

What is CVE-2023-2677?

A vulnerability has been identified in the SourceCodester Covid-19 Contact Tracing System version 1.0, specifically affecting the admin area. The flaw lies in the manipulation of the 'id' parameter within the manage.php file, which can allow an attacker to execute SQL injection attacks. This type of vulnerability could enable unauthorized access to sensitive data and potentially compromise the integrity and confidentiality of the system. Given that the exploit is publicly disclosed, immediate mitigation is essential to prevent potential attacks.

References