CVE-2023-2346

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/inquiries/view_inquiry.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227589 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Apr 27, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-234609.8Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass.CVE-2023-234619.8Libpeconv – access violation, before commit b076013 (30/11/2022).CVE-2023-234629.8Libpeconv – integer overflow, before commit 75b1565 (30/11/2022).CVE-2023-234637.5Sunell DVR, latest version, Insufficiently Protected Credentials (CWE-522) may be exposed through an unspecified request.CVE-2023-234647.5Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure.CVE-2023-234658.8Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint.CVE-2023-234667.5Media CP Media Control Panel latest version. Insufficiently protected credential change.CVE-2023-234676.1Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint.CVE-2023-234685.5IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to insufficient security config CVE-2023-234693.3IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.CVE-2023-23479.8A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability aff CVE-2023-234706.4IBM i 7.2, 7.3, 7.4, and 7.5 could allow an authenticated privileged administrator to gain elevated privileges in non-default configurations