CVE-2023-1964

🗓️ 09 Apr 2023 08:31:03Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 107 Views🌐 WEB

A critical vulnerability in PHPGurukul Bank Locker Management System 1.0 allows remote attackers to launch SQL injection via the recovery.php component

Reporter	Title	Published	Views	Family All 9
CNNVD	Bank Locker Management System SQL注入漏洞	9 Apr 202300:00	–	cnnvd
Cvelist	CVE-2023-1964 PHPGurukul Bank Locker Management System Password Reset recovery.php sql injection	9 Apr 202308:31	–	cvelist
EUVD	EUVD-2023-24150	3 Oct 202520:07	–	euvd
NVD	CVE-2023-1964	9 Apr 202309:15	–	nvd
OSV	CVE-2023-1964	9 Apr 202309:15	–	osv
Prion	Sql injection	9 Apr 202309:15	–	prion
Positive Technologies	PT-2023-17377 · Unknown · Phpgurukul Bank Locker Management System	9 Apr 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-1964	23 May 202503:02	–	redhatcve
Vulnrichment	CVE-2023-1964 PHPGurukul Bank Locker Management System Password Reset recovery.php sql injection	9 Apr 202308:31	–	vulnrichment

NVD

Vulners

Node

phpgurukul bank_locker_management_systemMatch1.0

[
  {
    "vendor": "PHPGurukul",
    "product": "Bank Locker Management System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ],
    "modules": [
      "Password Reset"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/vsdwef/Bank-locker-Managament-System/blob/main/password-recovery.php_SQL_English.pdf
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
uname	query param	recovery.php	SQL injection in recovery.php via uname/mobile parameters (Password Reset component)	CWE-89
mobile	query param	recovery.php	SQL injection in recovery.php via uname/mobile parameters (Password Reset component)	CWE-89

21 Nov 2024 07:40Current

8.7High risk

Vulners AI Score8.7

CVSS 3.17.3 - 9.1

CVSS 27.5

CVSS 37.3

EPSS0.00437

SSVC

CWE-89