CVE-2023-7110

A vulnerability, which was classified as critical, has been found in code-projects Library Management System 2.0. This issue affects some unknown processing of the file login.php. The manipulation of the argument student leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249005 was assigned to this vulnerability.
Configurations

Configuration 1 (hide)

cpe:2.3:a:fabianros:library_management_system:2.0:*:*:*:*:*:*:*

History

06 Dec 2024, 19:24

Type Values Removed Values Added
CWE CWE-89
CPE cpe:2.3:a:fabianros:library_management_system:2.0:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
References () https://github.com/h4md153v63n/CVEs/blob/main/Library-Management-System/Library-Management-System_SQL_Injection-2.md - () https://github.com/h4md153v63n/CVEs/blob/main/Library-Management-System/Library-Management-System_SQL_Injection-2.md - Exploit
References () https://vuldb.com/?id.249005 - () https://vuldb.com/?id.249005 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?ctiid.249005 - () https://vuldb.com/?ctiid.249005 - Permissions Required, Third Party Advisory, VDB Entry
First Time Fabianros
Fabianros library Management System

29 Feb 2024, 01:42

Type Values Removed Values Added
New CVE

Information

Published : 2024-02-29 01:42

Updated : 2024-12-06 19:24


NVD link : CVE-2023-7110

Mitre link : CVE-2023-7110


JSON object : View

Products Affected

fabianros

  • library_management_system
CWE

No CWE.