CVE-2023-2092

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in SourceCodester Vehicle Service Management System 1.0. Affected by this issue is some unknown functionality of the file view_service.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-226100.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Apr 15, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-209207.8In queue of UsbRequest.java, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of priviCVE-2023-209217.3In onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility services due to a logicCVE-2023-209225.5In setMimeGroup of PackageManagerService.java, there is a possible crash loop due to resource exhaustion. This could lead to local denial ofCVE-2023-209235.5In exported content providers of ShannonRcs, there is a possible way to get access to protected content providers due to a permissions bypasCVE-2023-209246.8In (TBD) of (TBD), there is a possible way to bypass the lockscreen due to Biometric Auth Failure. This could lead to local escalation of prCVE-2023-209257.8In setUclampMinLocked of PowerSessionManager.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to locaCVE-2023-209266.8In onParentVisible of HeaderPrivacyIconsController.kt, there is a possible way to bypass factory reset protections due to a missing permissiCVE-2023-209277.8In permissions of AndroidManifest.xml, there is a possible way to grant signature permissions due to a permissions bypass. This could lead tCVE-2023-209287.8In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilegCVE-2023-209295.5In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due to an unrestricted bCVE-2023-20939.8A vulnerability, which was classified as critical, was found in SourceCodester Vehicle Service Management System 1.0. This affects an unknowCVE-2023-209305.5In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resource exhaustion. This
CVE-2023-2092: Critical severity, CVSS 9.8 | Vulnix