CVE-2023-0774
HIGHMedical Certificate Generator App 1.0 - SQL Injection via Lastname Parameter
Title source: llmDescription
A vulnerability has been found in SourceCodester Medical Certificate Generator App 1.0 and classified as critical. This vulnerability affects unknown code of the file action.php. The manipulation of the argument lastname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-220558 is the identifier assigned to this vulnerability.
References (3)
Core 3
Core References
Third Party Advisory vdb-entry
technical-description
https://vuldb.com/?id.220558
Third Party Advisory signature
permissions-required
https://vuldb.com/?ctiid.220558
Exploit, Third Party Advisory media-coverage
https://www.youtube.com/watch?v=s3oK5jebx_I
Scores
CVSS v3
7.3
EPSS
0.0052
EPSS Percentile
40.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Details
CWE
CWE-89
Status
published
Products (1)
medical_certificate_generator_app_project/medical_certificate_generator_app
1.0
Published
Feb 10, 2023
Tracked Since
Feb 18, 2026