CVE-2023-2130

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected is an unknown function of the file /admin/suppliers/view_details.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-226206 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Apr 17, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-213005.5In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatCVE-2023-213015.5In ActivityManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel CVE-2023-213025.5In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informaCVE-2023-213035.5In Content, here is a possible way to determine whether an app is installed, without query permissions, due to side channel information discCVE-2023-213045.5In Content Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informaCVE-2023-213055.5In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disCVE-2023-213065.5In ContentService, there is a possible way to read installed sync content providers due to side channel information disclosure. This could lCVE-2023-213075.0In Bluetooth, there is a possible way for a paired Bluetooth device to access a long term identifier for an Android device due to a permissiCVE-2023-213085.5In Composer, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no CVE-2023-213095.5In libcore, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no adCVE-2023-21319.8Versions of INEA ME RTU firmware prior to 3.36 are vulnerable to OS command injection, which could allow an attacker to remotely execute arbCVE-2023-213106.7In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with S
CVE-2023-2130: Critical severity, CVSS 9.8 | Vulnix