CVEvulnerability
CVE-2023-0982
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-02-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Add Class Entry. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The identifier VDB-221677 was assigned to this vulnerability.
Affected configurations
• yoga class registration system project yoga class registration system 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://vuldb.com/?ctiid.221677 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.221677 Third Party Advisory, VDB Entry
- https://vuldb.com/?ctiid.221677 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.221677 Third Party Advisory, VDB Entry