CVE-2023-2690

ÉLEVÉE 8.8CVE-2023-2690 · Published 14/05/2023 · updated 17/06/2026

En bref

CVE-2023-2690 est une vulnérabilité ÉLEVÉE (CVSS 8.8) touchant personnel property equipment system (personnel property equipment system project).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.82%, plus élevée que 57.5% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
personnel property equipment system personnel_property_equipment_system_project	`= 1.0`	No fix yet

Description

A vulnerability, which was classified as critical, has been found in SourceCodester Personnel Property Equipment System 1.0. This issue affects some unknown processing of the file admin/returned_reuse_form.php of the component GET Parameter Handler. The manipulation of the argument client_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228971.

References

LeozhangCA/CVEReport · Exploit
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Autres vulnérabilités de personnel property equipment system

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free