SourceCodester Canteen Management System 1.0 createCategories.php query categoriesStatus sql injection

EntryHistoryDiffjsonxmlCTI

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects the function query of the file createCategories.php. The manipulation of the argument categoriesStatus leads to sql injection. Using CWE to declare the problem leads to CWE-89. The weakness was released 03/17/2023. The advisory is available at blog.csdn.net. This vulnerability was named CVE-2023-1461. The attack can be initiated remotely. Technical details are available. There is no exploit available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment. This vulnerability is assigned to T1505 by the MITRE ATT&CK project. It is declared as not defined. As 0-day the estimated underground price was around $0-$5k. A possible mitigation has been published even before and not after the disclosure of the vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

1	21

Field

source_cve_nvd_summary	1
source_cve_assigned	1
exploit_price_0day	1
vulnerability_cvss3_meta_tempscore	1
vulnerability_cvss3_meta_basescore	1

Commit Conf

90%	27
50%	12
70%	2

Approve Conf

90%	27
80%	12
70%	2

ID	Commited	User	Field	Change	Remarks	Accepted	Status	C
13941362	04/11/2023	VulD...	cve_nvd_summary	A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects the function query of the file createCategories.php. The manipulation of the argument categoriesStatus leads to sql injection. The attack can be initiated remotely. VDB-223306 is the identifier assigned to this vulnerability.	cve.mitre.org	04/11/2023	accepted	70
13941361	04/11/2023	VulD...	cve_assigned	1679007600 (03/17/2023)	cve.mitre.org	04/11/2023	accepted	70
13821103	03/17/2023	VulD...	price_0day	$0-$5k	see exploit price documentation	03/17/2023	accepted	90
13821102	03/17/2023	VulD...	cvss3_meta_tempscore	5.8	see CVSS documentation	03/17/2023	accepted	90
13821101	03/17/2023	VulD...	cvss3_meta_basescore	6.3	see CVSS documentation	03/17/2023	accepted	90
13821100	03/17/2023	VulD...	cvss3_vuldb_tempscore	5.8	see CVSS documentation	03/17/2023	accepted	90
13821099	03/17/2023	VulD...	cvss3_vuldb_basescore	6.3	see CVSS documentation	03/17/2023	accepted	90
13821098	03/17/2023	VulD...	cvss2_vuldb_tempscore	5.9	see CVSS documentation	03/17/2023	accepted	90
13821097	03/17/2023	VulD...	cvss2_vuldb_basescore	6.5	see CVSS documentation	03/17/2023	accepted	90
13821096	03/17/2023	VulD...	cvss3_vuldb_rl	X	derived from historical data	03/17/2023	accepted	80
13821095	03/17/2023	VulD...	cvss3_vuldb_e	X	derived from historical data	03/17/2023	accepted	80
13821094	03/17/2023	VulD...	cvss3_vuldb_pr	L	derived from historical data	03/17/2023	accepted	80
13821093	03/17/2023	VulD...	cvss2_vuldb_rl	ND	derived from historical data	03/17/2023	accepted	80
13821092	03/17/2023	VulD...	cvss2_vuldb_e	ND	derived from historical data	03/17/2023	accepted	80
13821091	03/17/2023	VulD...	cvss2_vuldb_au	S	derived from historical data	03/17/2023	accepted	80
13821090	03/17/2023	VulD...	cvss2_vuldb_rc	UC	derived from vuldb v3 vector	03/17/2023	accepted	80
13821089	03/17/2023	VulD...	cvss2_vuldb_ai	P	derived from vuldb v3 vector	03/17/2023	accepted	80
13821088	03/17/2023	VulD...	cvss2_vuldb_ii	P	derived from vuldb v3 vector	03/17/2023	accepted	80
13821087	03/17/2023	VulD...	cvss2_vuldb_ci	P	derived from vuldb v3 vector	03/17/2023	accepted	80
13821086	03/17/2023	VulD...	cvss2_vuldb_ac	L	derived from vuldb v3 vector	03/17/2023	accepted	80

21 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 21 results.

◂ Previous Overview Next ▸

Do you need the next level of professionalism?

Upgrade your account now!