SQL Injection Vulnerability in Purchase Order Management by Oretnom23
CVE-2023-29622
9.8CRITICAL
Key Information:
- Vendor
- CVE Published:
- 14 April 2023
What is CVE-2023-29622?
The Purchase Order Management version 1.0 by Oretnom23 has been identified to have a security flaw due to SQL injection via the password parameter at /purchase_order/admin/login.php. This vulnerability allows attackers to manipulate SQL queries, potentially exposing sensitive data and compromising the integrity of the application.
References
EPSS Score
18% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved