Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username and password fields, enabling SQL Injection attacks.
References
| Link | Resource |
|---|---|
| https://github.com/Mr-Secure-Code/My-CVE/blob/main/CVE-2023-37068-Exploit.md | Exploit Third Party Advisory |
| https://github.com/riteshs4hu/My-CVE/blob/main/CVE-2023-37068-Exploit.md |
Configurations
History
25 Sep 2024, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
15 Aug 2023, 19:30
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-89 | |
| CPE | cpe:2.3:a:sherlock:gym_management_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Sherlock gym Management System
Sherlock |
|
| References | (MISC) https://github.com/Mr-Secure-Code/My-CVE/blob/main/CVE-2023-37068-Exploit.md - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
09 Aug 2023, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-09 20:15
Updated : 2024-09-25 01:15
NVD link : CVE-2023-37068
Mitre link : CVE-2023-37068
CVE.ORG link : CVE-2023-37068
JSON object : View
Products Affected
sherlock
- gym_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')