CVEvulnerability
CVE-2023-0981
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-02-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. Affected is an unknown function of the component Delete User. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-221676.
Affected configurations
• yoga class registration system project yoga class registration system 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://vuldb.com/?ctiid.221676 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.221676 Third Party Advisory, VDB Entry
- https://vuldb.com/?ctiid.221676 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.221676 Third Party Advisory, VDB Entry