CVE-2023-2089

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/userprofile.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226097 was assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Complaint Management System	1.0

References

https://github.com/winkle175/bug_report/blob/main/SQLi-1.mdThird Party Advisory
https://vuldb.com/?ctiid.226097Permissions Required, Third Party Advisory
https://vuldb.com/?id.226097Permissions Required, Third Party Advisory
https://github.com/winkle175/bug_report/blob/main/SQLi-1.mdThird Party Advisory
https://vuldb.com/?ctiid.226097Permissions Required, Third Party Advisory
https://vuldb.com/?id.226097Permissions Required, Third Party Advisory

Timeline

Published: Apr 15, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-208907.2Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with administrative access to CVE-2023-208916.5The VMware Tanzu Application Service for VMs and Isolation Segment contain an information disclosure vulnerability due to the logging of cre CVE-2023-208929.8The vCenter Server contains a heap overflow vulnerability due to the usage of uninitialized memory in the implementation of the DCERPC proto CVE-2023-208939.8The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol. A malicious actor with netwo CVE-2023-208949.8The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with CVE-2023-208959.8The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol. A malicious actor with ne CVE-2023-208967.5The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A malicious actor with CVE-2023-208975.3Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to th CVE-2023-208987.8Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 300 CVE-2023-208997.5VMware SD-WAN (Edge) contains a bypass authentication vulnerability. An unauthenticated attacker can download the Diagnostic bundle of the a CVE-2023-20908.8A vulnerability classified as critical has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is an un CVE-2023-209007.5A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A95