CVE-2023-7134

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Medicine Tracking System 1.0. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument page leads to path traversal: '../filedir'. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-249137 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-24 CWE-22

Affected software

Vendor	Product	Versions
SourceCodester	Medicine Tracking System	1.0

References

https://medium.com/@2839549219ljk/medicine-tracking-system-rce-vulnerability-1f009165b915Exploit, Third Party Advisory
https://vuldb.com/?ctiid.249137Third Party Advisory
https://vuldb.com/?id.249137Third Party Advisory
https://medium.com/@2839549219ljk/medicine-tracking-system-rce-vulnerability-1f009165b915Exploit, Third Party Advisory
https://vuldb.com/?ctiid.249137Third Party Advisory
https://vuldb.com/?id.249137Third Party Advisory

Timeline

Published: Dec 28, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-71355.4A vulnerability classified as problematic has been found in code-projects Record Management System 1.0. Affected is an unknown function of t CVE-2023-71365.4A vulnerability classified as problematic was found in code-projects Record Management System 1.0. Affected by this vulnerability is an unkn CVE-2023-71378.8A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. Affected by this issue is some CVE-2023-71388.8A vulnerability, which was classified as critical, was found in code-projects Client Details System 1.0. This affects an unknown part of the CVE-2023-71399.8A vulnerability has been found in code-projects Client Details System 1.0 and classified as problematic. This vulnerability affects unknown CVE-2023-71409.8A vulnerability was found in code-projects Client Details System 1.0 and classified as problematic. This issue affects some unknown processi CVE-2023-71419.8A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function CVE-2023-71429.8A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability is CVE-2023-71434.8A vulnerability was found in code-projects Client Details System 1.0. It has been rated as problematic. Affected by this issue is some unkno CVE-2023-71449.8A vulnerability classified as critical has been found in gopeak MasterLab up to 3.3.10. This affects the function sqlInject of the file app/CVE-2023-71459.8A vulnerability classified as critical was found in gopeak MasterLab up to 3.3.10. This vulnerability affects the function sqlInject of the CVE-2023-71469.8A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjec