CVE-2023-0915

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manage_user. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-221490 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Auto Dealer Management System	1.0

References

https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Auto%20Dealer%20Management%20System%20-%20SQL%20Injection%20-%203.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.221490Permissions Required, Third Party Advisory
https://vuldb.com/?id.221490Third Party Advisory
https://github.com/navaidzansari/CVE_Demo/blob/main/2023/Auto%20Dealer%20Management%20System%20-%20SQL%20Injection%20-%203.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.221490Permissions Required, Third Party Advisory
https://vuldb.com/?id.221490Third Party Advisory

Timeline

Published: Feb 19, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-09168.8A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an u CVE-2023-09179.8A vulnerability, which was classified as critical, was found in SourceCodester Simple Customer Relationship Management System 1.0. This affe CVE-2023-09189.8A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown CVE-2023-09193.5Missing Authentication for Critical Function in GitHub repository kareadita/kavita prior to 0.7.0.CVE-2023-09214.3A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 all CVE-2023-09225.9The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-CVE-2023-09239.8A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications fro CVE-2023-09247.2The ZYREX POPUP WordPress plugin through 1.0 does not validate the type of files uploaded when creating a popup, allowing a high privileged CVE-2023-09259.8Version 10.11 of webMethods OneData runs an embedded instance of Azul Zulu Java 11.0.15 which hosts a Java RMI registry (listening on TCP po CVE-2023-09265.4The Custom Permalinks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 due to insuf CVE-2023-09278.8Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the ren CVE-2023-09288.8Use after free in SwiftShader in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via