CVE-2023-48078

SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-11-17

Last modified

2024-08-14

Weaknesses

CWE-89

Affected products

• Simple Crud Functionality (Code-projects)

References

• https://github.com/esasadam06/Simple-CRUD-Functionality-SQLi-POC