SourceCodester AC Repair and Services System HTTP POST Request sql injection

CVE-2023-3619

Summary

A SQL injection vulnerability exists in the SourceCodester AC Repair and Services System 1.0, specifically in the HTTP POST Request Handler located in the Master.php file. This issue arises due to improper validation of the 'id' parameter, allowing attackers to manipulate requests and execute malicious SQL queries. The exploitation of this vulnerability can lead to unauthorized access to the database and potentially expose sensitive information. Attackers can initiate this process remotely, posing significant security risks to installations of the affected product.

References