SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in the deleteProduct.php component.
References
Link | Resource |
---|---|
https://github.com/ersinerenler/Code-Projects-Inventory-Management-1.0/blob/main/CVE-2023-46582-Code-Projects-Inventory-Management-1.0-SQL-Injection-Vulnerability.md | Exploit Product Third Party Advisory |
Configurations
History
20 Nov 2023, 20:35
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-89 | |
First Time |
Code-projects
Code-projects inventory Management |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
References | () https://github.com/ersinerenler/Code-Projects-Inventory-Management-1.0/blob/main/CVE-2023-46582-Code-Projects-Inventory-Management-1.0-SQL-Injection-Vulnerability.md - Exploit, Product, Third Party Advisory | |
CPE | cpe:2.3:a:code-projects:inventory_management:1.0:*:*:*:*:*:*:* |
14 Nov 2023, 22:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-11-14 22:15
Updated : 2024-02-28 20:54
NVD link : CVE-2023-46582
Mitre link : CVE-2023-46582
CVE.ORG link : CVE-2023-46582
JSON object : View
Products Affected
code-projects
- inventory_management
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')