CVE-2023-7146

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjectDelete of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument phone leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-249149 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
gopeakMasterLab3.3.0; 3.3.1; 3.3.2; 3.3.3; 3.3.4; 3.3.5; 3.3.6; 3.3.7; 3.3.8; 3.3.9; 3.3.10

References

Timeline

Published
Dec 29, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-71479.8A vulnerability, which was classified as critical, was found in gopeak MasterLab up to 3.3.10. Affected is the function base64ImageContent oCVE-2023-71488.1A vulnerability has been found in ShifuML shifu 0.12.0 and classified as critical. Affected by this vulnerability is an unknown functionalitCVE-2023-71496.1A vulnerability was found in code-projects QR Code Generator 1.0. It has been classified as problematic. This affects an unknown part of theCVE-2023-71508.8A vulnerability classified as critical was found in Campcodes Chic Beauty Salon 20230703. Affected by this vulnerability is an unknown functCVE-2023-71516.1The Product Enquiry for WooCommerce WordPress plugin before 3.2 does not sanitise and escape the page parameter before outputting it back inCVE-2023-71529.8A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the functiCVE-2023-71536.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Macroturk Software and Internet TechnoCVE-2023-71544.8The Hubbub Lite (formerly Grow Social) WordPress plugin before 1.32.0 does not sanitise and escape some of its settings, which could allow hCVE-2023-71558.8A vulnerability, which was classified as critical, was found in SourceCodester Free and Open Source Inventory Management System 1.0. This afCVE-2023-71569.8A vulnerability has been found in Campcodes Online College Library System 1.0 and classified as critical. This vulnerability affects unknownCVE-2023-71579.8A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0 and classified as critical. This issue affeCVE-2023-71589.8A vulnerability was found in MicroPython up to 1.21.0. It has been classified as critical. Affected is the function slice_indices of the fil