Lucene search
K

CVE-2023-2772

🗓️ 17 May 2023 18:31:04Reported by VulDBType 
cve
 cve
🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

A critical SQL injection vulnerability in SourceCodester Budget and Expense Tracker System 1.0 allows remote attackers to manipulate GET parameter id in /admin/budget/manage_budget.php, leading to unauthorized SQL database access

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2023-2772
17 May 202322:32
circl
CNNVD
Sourcecodester Budget And Expense Tracker System SQL注入漏洞
17 May 202300:00
cnnvd
CNVD
Budget And Expense Tracker System SQL Injection Vulnerability
19 May 202300:00
cnvd
Cvelist
CVE-2023-2772 SourceCodester Budget and Expense Tracker System GET Parameter manage_budget.php sql injection
17 May 202318:31
cvelist
EUVD
EUVD-2023-34230
3 Oct 202520:07
euvd
NVD
CVE-2023-2772
17 May 202319:15
nvd
OSV
CVE-2023-2772
17 May 202319:15
osv
Prion
Sql injection
17 May 202319:15
prion
Positive Technologies
PT-2023-21308 · Unknown · Sourcecodester Budget/Expense Tracker System
17 May 202300:00
ptsecurity
RedhatCVE
CVE-2023-2772
23 May 202501:51
redhatcve
Rows per page
NVD
Vulners
[
  {
    "vendor": "SourceCodester",
    "product": "Budget and Expense Tracker System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ],
    "modules": [
      "GET Parameter Handler"
    ]
  }
]
ParameterPositionPathDescriptionCWE
idquery param/admin/budget/manage_budget.phpSQL injection via GET parameter id in budget management endpoint.CWE-89

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 07:59Current
7.8High risk
Vulners AI Score7.8
CVSS 3.16.3 - 8.8
CVSS 26.5
CVSS 36.3
EPSS0.00346
SSVC
48