Lucene search

K
cvelistMitreCVELIST:CVE-2023-37068
HistoryAug 09, 2023 - 12:00 a.m.

CVE-2023-37068

2023-08-0900:00:00
mitre
www.cve.org
2
sql injection
remote attack
unauthorized access
data manipulation
user validation

EPSS

0.002

Percentile

52.3%

Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username and password fields, enabling SQL Injection attacks.

EPSS

0.002

Percentile

52.3%

Related for CVELIST:CVE-2023-37068