CVE-2023-2773

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file view_admin.php. The manipulation of the argument adminid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229279.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
code-projects	Bus Dispatch and Information System	1.0

References

https://gitee.com/zyz0103/system-vul/blob/master/Bus%20Dispatch%20and%20Information%20System%20in%20adminid%20has%20Sql%20injection%20vulnerabilities.pdfBroken Link
https://vuldb.com/?ctiid.229279Permissions Required, Third Party Advisory
https://vuldb.com/?id.229279Third Party Advisory
https://gitee.com/zyz0103/system-vul/blob/master/Bus%20Dispatch%20and%20Information%20System%20in%20adminid%20has%20Sql%20injection%20vulnerabilities.pdfBroken Link
https://vuldb.com/?ctiid.229279Permissions Required, Third Party Advisory
https://vuldb.com/?id.229279Third Party Advisory

Timeline

Published: May 17, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-277307.5Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_lvlhsh_find at src/njs_lvlhsh.c.CVE-2023-277337.2DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/sys_sql_query.php.CVE-2023-277345.5An issue found in Eteran edb-debugger v.1.3.0 allows a local attacker to causea denial of service via the collect_symbols function in plugin CVE-2023-277396.1easyXDM 2.5 allows XSS via the xdm_e parameter.CVE-2023-27749.8A vulnerability was found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this issue is som CVE-2023-277429.8IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login.CVE-2023-277447.8An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a vertical privilege escalation leading to remot CVE-2023-277458.8An issue in South River Technologies TitanFTP Before v2.0.1.2102 allows attackers with low-level privileges to perform Administrative action CVE-2023-277469.8BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force CVE-2023-277477.5BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web server. This vulnerability allows attackers to access se CVE-2023-277489.8BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded firmware. This can allow attackers to upload craft CVE-2023-27758.8A vulnerability was found in code-projects Bus Dispatch and Information System 1.0. It has been classified as critical. This affects an unkn