CVE-2023-1292

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in SourceCodester Sales Tracker Management System 1.0 and classified as critical. This vulnerability affects the function delete_client of the file classes/Master.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222646 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Sales Tracker Management System	1.0

References

https://github.com/Mart1nD0t/vul-test/blob/main/sts-3.mdExploit, Vendor Advisory
https://vuldb.com/?ctiid.222646Third Party Advisory
https://vuldb.com/?id.222646Third Party Advisory
https://github.com/Mart1nD0t/vul-test/blob/main/sts-3.mdExploit, Vendor Advisory
https://vuldb.com/?ctiid.222646Third Party Advisory
https://vuldb.com/?id.222646Third Party Advisory

Timeline

Published: Mar 9, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-12938.1A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects the function my CVE-2023-12949.8A vulnerability was found in SourceCodester File Tracker Manager System 1.0. It has been classified as critical. Affected is an unknown func CVE-2023-12957.0A time-of-check to time-of-use issue exists in io_uring subsystem's IORING_OP_CLOSE operation in the Linux kernel's versions 5.6 - 5.11 (inc CVE-2023-12965.3HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not correctly enforce deny policies applied to a workload’s variables. Fixed in 1 CVE-2023-12977.5Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a loc CVE-2023-12986.1ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the Se CVE-2023-12998.8HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task CVE-2023-13009.8A vulnerability classified as critical was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is CVE-2023-13019.8A vulnerability, which was classified as critical, has been found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. A CVE-2023-13026.1A vulnerability, which was classified as problematic, was found in SourceCodester File Tracker Manager System 1.0. This affects an unknown p CVE-2023-13039.8A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php CVE-2023-13048.8An authenticated attacker can leverage an exposed getattr() method via a Jinja template to smuggle OS commands and perform other actions tha