CVE-2023-4182

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file edit_sell.php. The manipulation of the argument up_pid leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-236217 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
SourceCodesterInventory Management System1.0

References

Timeline

Published
Aug 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-418205.0An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information abCVE-2023-418215.0A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to read sensitive user iCVE-2023-418224.8An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local applicationCVE-2023-418234.4An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauCVE-2023-418242.8An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling CVE-2023-418252.8A path traversal vulnerability was reported in the Motorola Ready For application that could allow a local attacker to access local files.CVE-2023-418265.1A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or inteCVE-2023-418275.1An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to injCVE-2023-418284.4An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exportCVE-2023-418295.0An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application tCVE-2023-41839.8A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vulnerability affects uCVE-2023-418306.5An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local application access to files wi
CVE-2023-4182: Critical severity, CVSS 9.8 | Vulnix