Sql injection

2023-03-3120:15:00

PRIOn knowledge base

www.prio-n.com

sourcecodester earnings and expense tracker

critical vulnerability

sql injection

manage_user.php

remote attack

vdb-224700

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as critical. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-224700.

CPENameOperatorVersion
earnings_and_expense_tracker_appeq1.0

CPE	Name	Operator	Version
	earnings_and_expense_tracker_app	eq	1.0

References

github.com/web-zxl/img/blob/main/4.png

vuldb.com/?ctiid.224700

vuldb.com/?id.224700