Vulnerability · Published May 9, 2023 · Assigned by VulDB

CVE-2023-2594SourceCodester Food Ordering Management System Registration sql injection

High 7.3

In plain English

A high-severity SQL injection in Food Ordering Management System from SourceCodester. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)1.0%top 36.8% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack tooling1Public PoC

Official description

A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-228396.

Affected products (as reported)

Vendor	Product	Versions
SourceCodester	Food Ordering Management System	1.0

Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References

https://vuldb.com/?id.228396 vdb-entry, technical-description
https://vuldb.com/?ctiid.228396 signature