Paper/Archive/CVE-2023-0784

CVE-2023-0784

SourceCodester Best Online News Portal — SourceCodester Best Online News Portal Login Page sql injection

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 57.0.570 × 2011.4 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. Affected is an unknown function of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-220644.

Affected

ProductAffectedFixed inSource

Best Online News Portal1.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

VulDB (CNA)7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

VulDB (CNA)7.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References

writeupvuldb.com/?id.220644 refvuldb.com/?ctiid.220644 refyoutu.be/V62MSWhLGL4