CVE-2023-0774
7.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Summary
A vulnerability has been found in SourceCodester Medical Certificate Generator App 1.0 and classified as critical. This vulnerability affects unknown code of the file action.php. The manipulation of the argument lastname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-220558 is the identifier assigned to this vulnerability.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SourceCodester | Medical Certificate Generator App | 1.0 | affected |
Weaknesses
- CWE-89: CWE-89 SQL Injection
ADP Enrichment
CVE Program Container
Additional References
- https://vuldb.com/?id.220558
- https://vuldb.com/?ctiid.220558
- https://www.youtube.com/watch?v=s3oK5jebx_I
References
- https://vuldb.com/?id.220558
- https://vuldb.com/?ctiid.220558
- https://www.youtube.com/watch?v=s3oK5jebx_I
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.