2 matches found
CVE-2023-5018 SourceCodester Lost and Found Information System POST Parameter sql injection
A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=savecategory of the component POST Parameter Handler. The manipulation of the argument id leads to sql injection. It is...
6.5CVSS7.6AI score0.00425EPSS
SaveExploits0References2
CVE-2023-5018
SourceCodester Lost and Found Information System 1.0 has a SQL injection in the POST Parameter Handler, specifically via the id parameter in /classes/Master.php?f=save_category. The issue is triggered by manipulating id, enabling remote exploitation and impacting confidentiality, integrity, and a...
9.8CVSS7.4AI score0.00425EPSS
SaveExploits0References2Affected Software1
20