CVE-2023-3680

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=save_item of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-234225 was assigned to this vulnerability.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cna@vuldb.com

Published

2023-07-15

Last modified

2024-08-02

Weaknesses

CWE-89

Affected products

• Lost And Found Information System (Oretnom23)
• Lost And Found Information System (Sourcecodester)

References

• https://vuldb.com/?ctiid.234225
• https://vuldb.com/?id.234225