Lucene search
CVE-2023-1037
Vulnerability in SourceCodester Dental Clinic Appointment Reservation System 1.0, rated critical, allows remote attackers to initiate sql injection via username parameter manipulation in /APR/login.php
Show more
| Reporter | Title | Published | Views | Family All 3 |
|---|---|---|---|---|
 | Sql injection | 26 Feb 202312:15 | – | prion |
 | CVE-2023-1037 | 26 Feb 202312:15 | – | nvd |
 | CVE-2023-1037 SourceCodester Dental Clinic Appointment Reservation System POST Parameter login.php sql injection | 26 Feb 202311:49 | – | cvelist |
[
{
"vendor": "SourceCodester",
"product": "Dental Clinic Appointment Reservation System",
"versions": [
{
"version": "1.0",
"status": "affected"
}
],
"modules": [
"POST Parameter Handler"
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| username | request body | /APR/login.php | SQL injection vulnerability due to improper handling of the username parameter. | CWE-89 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo26 Feb 2023 12:15Current
8.9High risk
Vulners AI Score8.9
CVSS27.5
CVSS37.3 - 9.8
EPSS0.00057