CVEvulnerability
CVE-2023-1461
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-03-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects the function query of the file createCategories.php. The manipulation of the argument categoriesStatus leads to sql injection. The attack can be initiated remotely. VDB-223306 is the identifier assigned to this vulnerability.
Affected configurations
• canteen management system project canteen management system 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://blog.csdn.net/weixin_43864034/article/details/129622219 Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.223306 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.223306 Third Party Advisory, VDB Entry
- https://blog.csdn.net/weixin_43864034/article/details/129622219 Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.223306 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.223306 Third Party Advisory, VDB Entry