CVE-2023-46956

SQL injection vulnerability in Packers and Movers Management System v.1.0 allows a remote attacker to execute arbitrary code via crafted payload to the /mpms/admin/?page=user/manageuser file...

CVE-2023-46956

SQL injection vulnerability in Packers and Movers Management System v.1.0 allows a remote attacker to execute arbitrary code via crafted payload to the /mpms/admin/?page=user/manageuser&id file...

CVE-2023-46956

CVE-2023-46956 is a SQL injection vulnerability in Packers and Movers Management System v1.0. The flaw affects the endpoint /mpms/admin/?page=user/manage_user&id and allows a remote attacker to potentially execute arbitrary code via crafted payloads. The root cause is improper handling of the id ...