CVE-2023-4437

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_sell_paymen_report.php. The manipulation of the argument customer leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-237558 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Aug 20, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-443717.8Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that CVE-2023-443727.8Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that CVE-2023-443739.1Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges CVE-2023-443748.8A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM CVE-2023-443785.5gnark is a zk-SNARK library that offers a high-level API to design circuits. Prior to version 0.9.0, for some in-circuit values, it is possi CVE-2023-443796.1baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the site search featur CVE-2023-44389.8A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. Affected by this vulnerability CVE-2023-443814.9October is a Content Management System (CMS) and web platform to assist with development workflow. An authenticated backend user with the `e CVE-2023-443829.1October is a Content Management System (CMS) and web platform to assist with development workflow. An authenticated backend user with the `e CVE-2023-443835.4October is a Content Management System (CMS) and web platform to assist with development workflow. A user with access to the media manager t CVE-2023-443844.1Discourse-jira is a Discourse plugin allows Jira projects, issue types, fields and field options will be synced automatically. An administra CVE-2023-443858.8The Home Assistant Companion for iOS and macOS app up to version 2023.4 are vulnerable to Client-Side Request Forgery. Attackers may send ma