SourceCodester Lost and Found Information System POST Parameter sql injection

CVE-2023-5018

Summary

A vulnerability impacting SourceCodester's Lost and Found Information System 1.0 has been identified, originating from the POST Parameter Handler component, specifically in the Master.php file. The flaw allows an attacker to manipulate the 'id' parameter leading to SQL injection, which can be exploited remotely. This could potentially result in unauthorized access to the database, retrieval of sensitive data, or further compromise of the web application.

References