CVE-2023-0986

MEDIUM

Sales Tracker Management System 1.0 - SQL Injection via Edit User ID Parameter

Title source: llm

Description

A vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. This affects an unknown part of the file admin/?page=user/manage_user of the component Edit User. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-221679.

References (2)

Core 2

Core References

Permissions Required, Third Party Advisory, VDB Entry vdb-entry technical-description

https://vuldb.com/?id.221679

Permissions Required, Third Party Advisory, VDB Entry signature

https://vuldb.com/?ctiid.221679

Scores

CVSS v3 6.3

EPSS 0.0054

EPSS Percentile 41.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE

CWE-89

Status published

Products (1)

sales_tracker_management_system_project/sales_tracker_management_system 1.0

Published Feb 23, 2023

Tracked Since Feb 18, 2026