CVE-2023-3391

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file detailview.php. The manipulation of the argument employeeid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232288.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Jun 23, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-339105.5In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional executi CVE-2023-339115.5In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution CVE-2023-339125.5In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional executi CVE-2023-339137.2In DRM/oemcrypto, there is a possible out of bounds write due to an incorrect calculation of buffer size.This could lead to remote escalatio CVE-2023-339147.5In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to remote information CVE-2023-339157.5In LTE protocol stack, there is a possible missing permission check. This could lead to remote information disclosure no additional executio CVE-2023-339165.5In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution CVE-2023-339175.5In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution CVE-2023-339185.5In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution CVE-2023-339197.2A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).CVE-2023-33927.2The Read More & Accordion WordPress plugin before 3.2.7 unserializes user input provided via the settings, which could allow high-privilege CVE-2023-339206.8A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).