Lucene search

K
cveMitreCVE-2023-46018
HistoryNov 13, 2023 - 10:15 p.m.

CVE-2023-46018

2023-11-1322:15:07
CWE-89
mitre
web.nvd.nist.gov
31
cve-2023-46018
sql injection
code-projects blood bank 1.0
receiverreg.php
nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.1

Confidence

High

EPSS

0

Percentile

9.0%

SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \allows attackers to run arbitrary SQL commands via ‘remail’ parameter.

Affected configurations

Nvd
Node
code-projectsblood_bankMatch1.0
VendorProductVersionCPE
code-projectsblood_bank1.0cpe:2.3:a:code-projects:blood_bank:1.0:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.1

Confidence

High

EPSS

0

Percentile

9.0%