CVE-2023-2090

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is an unknown function of the file /admin/maintenance/view_designation.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-226098 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
SourceCodesterEmployee and Visitor Gate Pass Logging System1.0
employee_and_visitor_gate_pass_logging_system_projectemployee_and_visitor_gate_pass_logging_system1.0

References

Timeline

Published
Apr 15, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-209007.5A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A95CVE-2023-209026.5A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below,  Harbor 2.8.2 and below, and Harbor 1.10.17 and below allows an attackCVE-2023-209034.3This disclosure regards a vulnerability related to UAA refresh tokens and external identity providers.Assuming that an external identity proCVE-2023-209047.8In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mismatch in the code. ThiCVE-2023-209057.8In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to locCVE-2023-209067.8In onPackageAddedInternal of PermissionManagerService.java, there is a possible way to silently grant a permission after a Target SDK updateCVE-2023-209085.5In several functions of SettingsState.java, there is a possible system crash loop due to resource exhaustion. This could lead to local deniaCVE-2023-209095.5In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. This could lead to loCVE-2023-20917.8A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function adCVE-2023-209105.5In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhaustion. This could lead tCVE-2023-209117.8In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due to resource exhaustioCVE-2023-209127.8In onActivityResult of AvatarPickerActivity.java, there is a possible way to access images belonging to other users due to a missing permiss
CVE-2023-2090: High severity, CVSS 8.8 | Vulnix