Lucene search

K
nvd[email protected]NVD:CVE-2023-46018
HistoryNov 13, 2023 - 10:15 p.m.

CVE-2023-46018

2023-11-1322:15:07
CWE-89
web.nvd.nist.gov
cve-2023-46018
sql injection
receiverreg.php
code-projects blood bank
arbitrary sql commands
remail parameter

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

9.2%

SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \allows attackers to run arbitrary SQL commands via ‘remail’ parameter.

Affected configurations

NVD
Node
code-projectsblood_bankMatch1.0

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

9.2%

Related for NVD:CVE-2023-46018