CVE-2023-3694

🗓️ 16 Jul 2023 23:31:03Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 47 Views🌐 WEB

Vulnerability in SourceCodester House Rental and Property Listing 1.0 allows remote SQL injection via keywords/location argument in index.ph

Reporter	Title	Published	Views	Family All 6
CNNVD	House Rental and Property Listing SQL注入漏洞	17 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-3694 SourceCodester/projectworlds House Rental and Property Listing index.php sql injection	16 Jul 202323:31	–	cvelist
EUVD	EUVD-2023-44331	3 Oct 202520:07	–	euvd
NVD	CVE-2023-3694	17 Jul 202300:15	–	nvd
Prion	Sql injection	17 Jul 202300:15	–	prion
RedhatCVE	CVE-2023-3694	4 Mar 202518:51	–	redhatcve

NVD

Vulners

Node

sourcecodester_house_rental_and_property_listing_project house_rental_and_property_listingMatch1.0

[
  {
    "vendor": "SourceCodester",
    "product": "House Rental and Property Listing",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "projectworlds",
    "product": "House Rental and Property Listing",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/safetom6/House-Rental-and-Property-Listing-System/blob/main/House%20Rental%20and%20Property%20Listing%20System%20index.php%20has%20Sqlinjection.pdf
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
keywords	query param	/index.php	SQL injection through manipulated keywords/location parameters in index.php	CWE-74, CWE-89
location	query param	/index.php	SQL injection through manipulated keywords/location parameters in index.php	CWE-74, CWE-89

04 Mar 2025 17:15Current

8.3High risk

Vulners AI Score8.3

CVSS 3.16.3 - 9.8

CVSS 45.3

CVSS 26.5

CVSS 36.3

EPSS0.00067