CVE-2023-0706

MEDIUM

Medical Certificate Generator App 1.0 - SQL Injection via manage_record.php id Parameter

Title source: llm
STIX 2.1

Description

A vulnerability, which was classified as critical, has been found in SourceCodester Medical Certificate Generator App 1.0. Affected by this issue is some unknown functionality of the file manage_record.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-220340.

References (2)

Core 2
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.220340
Permissions Required, Third Party Advisory signature
https://vuldb.com/?ctiid.220340

Scores

CVSS v3 6.3
EPSS 0.0031
EPSS Percentile 23.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-89
Status published
Products (1)
medical_certificate_generator_app_project/medical_certificate_generator_app 1.0
Published Feb 07, 2023
Tracked Since Feb 18, 2026