Lucene search
China National Vulnerability DatabaseCNVD-2023-41540HistoryMay 13, 2023 - 12:00 a.m.
File Tracker Manager System SQL Injection Vulnerability
2023-05-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
file tracker manager system
sql injection
vulnerability
validation
parameter
new_password
register/update_password.php
attacker
illegal sql commands
sensitive database data
cnvd
0.002 Low
EPSS
Percentile
53.3%
File Tracker Manager System is a file tracker manager system. File Tracker Manager System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameter new_password in the file register/update_password.php against externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitive database data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| file tracker manager system file tracker manager system | eq | 1.0 |
Related
cve
cve
CVE-2023-2643
2023-05-11 07:15:08
prion
prion
Sql injection
2023-05-11 07:15:00
nvd
nvd
CVE-2023-2643
2023-05-11 07:15:08
cvelist
cvelist