CVE-2023-0305

 

Published at: - 15-01-2023 01:15

Last modified: - 27-01-2023 03:24

Total changes: - 4

Description

A vulnerability classified as critical was found in SourceCodester Online Food Ordering System. This vulnerability affects unknown code of the file admin_class.php of the component Login Module. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-218386 is the identifier assigned to this vulnerability.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

 

Verification logic

 

Reference

• https://github.com/Hanfu-l/cvetest/blob/main/3.pdf
• https://vuldb.com/?ctiid.218386
• https://vuldb.com/?id.218386

 

Keywords

NVD

 

CVE-2023-0305

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures