CVE-2023-7137

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. Affected by this issue is some unknown functionality of the component HTTP POST Request Handler. The manipulation of the argument uemail leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249140.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Dec 28, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-71388.8A vulnerability, which was classified as critical, was found in code-projects Client Details System 1.0. This affects an unknown part of theCVE-2023-71399.8A vulnerability has been found in code-projects Client Details System 1.0 and classified as problematic. This vulnerability affects unknown CVE-2023-71409.8A vulnerability was found in code-projects Client Details System 1.0 and classified as problematic. This issue affects some unknown processiCVE-2023-71419.8A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown functionCVE-2023-71429.8A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability isCVE-2023-71434.8A vulnerability was found in code-projects Client Details System 1.0. It has been rated as problematic. Affected by this issue is some unknoCVE-2023-71449.8A vulnerability classified as critical has been found in gopeak MasterLab up to 3.3.10. This affects the function sqlInject of the file app/CVE-2023-71459.8A vulnerability classified as critical was found in gopeak MasterLab up to 3.3.10. This vulnerability affects the function sqlInject of the CVE-2023-71469.8A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjecCVE-2023-71479.8A vulnerability, which was classified as critical, was found in gopeak MasterLab up to 3.3.10. Affected is the function base64ImageContent oCVE-2023-71488.1A vulnerability has been found in ShifuML shifu 0.12.0 and classified as critical. Affected by this vulnerability is an unknown functionalitCVE-2023-71496.1A vulnerability was found in code-projects QR Code Generator 1.0. It has been classified as problematic. This affects an unknown part of the