SourceCodester Lost and Found Information System GET Parameter sql injection

CVE-2023-2698

What is CVE-2023-2698?

The Lost and Found Information System by SourceCodester is susceptible to an SQL injection vulnerability due to insufficient validation of user input in the file admin/?page=items/manage_item. An attacker can manipulate the 'id' parameter in GET requests, allowing for unauthorized access to the database and potential data leaks. This vulnerability is particularly dangerous as it can be exploited remotely, putting sensitive data at risk. The exploit is publicly available, highlighting the importance of promptly addressing this security issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References