Description

A vulnerability classified as critical was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this vulnerability is an unknown functionality of the file passwordrecover.php. The manipulation of the argument phonenumber leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-224623.

Related CPE's

a

young_entrepreneur_e-negosyo_system_project

young_entrepreneur_e-negosyo_system

1.0

Vulnerable

References

https://vuldb.com/?ctiid.224623

Third Party Advisory

https://vuldb.com/?id.224623

Third Party Advisory

Weaknesses

[email protected]

Primary
CWE-89

[email protected]

Secondary
CWE-89

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-03-30T20:15:06.947

2 years ago

Last modified

2024-05-17T02:18:23.617

1 year ago