CVE-2023-5018

SourceCodester Lost and Found Information System 1.0 has a SQL injection in the POST Parameter Handler, specifically via the id parameter in /classes/Master.php?f=save_category. The issue is triggered by manipulating id, enabling remote exploitation and impacting confidentiality, integrity, and a...

CVE-2023-5018 SourceCodester Lost and Found Information System POST Parameter sql injection

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=savecategory of the component POST Parameter Handler. The manipulation of the argument id leads to sql injection. It is...