SourceCodester User Registration and Login System add-user.php sql injection

CVE-2023-6464

What is CVE-2023-6464?

A SQL injection vulnerability has been discovered within the SourceCodester User Registration and Login System version 1.0. This security flaw resides in the /endpoint/add-user.php file, where improper handling of the 'user' argument could allow an attacker to manipulate SQL queries. This makes it possible for a remote attacker to execute unauthorized SQL commands, potentially compromising the application's database. The vulnerability has been publicly disclosed, raising concerns about the potential exploitation by malicious actors. Users are highly advised to verify their applications and apply necessary patches to mitigate the risks associated with this vulnerability.

References