A vulnerability classified as critical was found in SourceCodester Simple Membership System 1.0. Affected by this vulnerability is an unknown functionality of the file club_validator.php. The manipulation of the argument club leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239869 was assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://github.com/LianghaoW/CveHub/blob/main/Simple-Membership-System%20club_validator.php%20has%20Sqlinjection.pdf | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.239869 | Third Party Advisory |
| https://vuldb.com/?id.239869 | Third Party Advisory |
Configurations
History
20 Sep 2023, 15:43
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Razormist
Razormist simple Membership System |
|
| CPE | cpe:2.3:a:razormist:simple_membership_system:1.0:*:*:*:*:*:*:* | |
| References | (MISC) https://vuldb.com/?ctiid.239869 - Third Party Advisory | |
| References | (MISC) https://github.com/LianghaoW/CveHub/blob/main/Simple-Membership-System%20club_validator.php%20has%20Sqlinjection.pdf - Exploit, Third Party Advisory | |
| References | (MISC) https://vuldb.com/?id.239869 - Third Party Advisory |
18 Sep 2023, 00:49
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-09-17 17:15
Updated : 2024-05-17 02:32
NVD link : CVE-2023-5027
Mitre link : CVE-2023-5027
CVE.ORG link : CVE-2023-5027
JSON object : View
Products Affected
razormist
- simple_membership_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')