CVE-2023-7130

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-249133 was assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
code-projectsCollege Notes Gallery2.0

References

Timeline

Published
Dec 31, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-71319.8A vulnerability was found in code-projects Intern Membership Management System 2.0 and classified as critical. Affected by this issue is somCVE-2023-71325.4A vulnerability was found in code-projects Intern Membership Management System 2.0. It has been classified as problematic. This affects an uCVE-2023-71336.1A vulnerability was found in y_project RuoYi 4.7.8. It has been declared as problematic. This vulnerability affects unknown code of the fileCVE-2023-71349.8A vulnerability was found in SourceCodester Medicine Tracking System 1.0. It has been rated as critical. This issue affects some unknown proCVE-2023-71355.4A vulnerability classified as problematic has been found in code-projects Record Management System 1.0. Affected is an unknown function of tCVE-2023-71365.4A vulnerability classified as problematic was found in code-projects Record Management System 1.0. Affected by this vulnerability is an unknCVE-2023-71378.8A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. Affected by this issue is someCVE-2023-71388.8A vulnerability, which was classified as critical, was found in code-projects Client Details System 1.0. This affects an unknown part of theCVE-2023-71399.8A vulnerability has been found in code-projects Client Details System 1.0 and classified as problematic. This vulnerability affects unknown CVE-2023-71409.8A vulnerability was found in code-projects Client Details System 1.0 and classified as problematic. This issue affects some unknown processiCVE-2023-71419.8A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown functionCVE-2023-71429.8A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability is