CVE-2023-2093

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-226101 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Apr 15, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-209305.5In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resource exhaustion. This CVE-2023-209317.8In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to locaCVE-2023-209323.3In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due to improper input valCVE-2023-209337.8In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalatiCVE-2023-209347.8In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicator due to a permissionCVE-2023-209355.5In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local informationCVE-2023-209367.8In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escCVE-2023-209377.8In several functions of the Android Linux kernel, there is a possible way to corrupt memory due to a use after free. This could lead to locaCVE-2023-209387.8In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to loCVE-2023-209397.8In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead toCVE-2023-20946.3A vulnerability has been found in SourceCodester Vehicle Service Management System 1.0 and classified as critical. This vulnerability affectCVE-2023-209407.8In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. This could lead to local
CVE-2023-2093: Critical severity, CVSS 9.8 | Vulnix