CVE-2023-1461
MEDIUMSourceCodester Canteen Management System 1.0 - SQL Injection
Title source: llmDescription
A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects the function query of the file createCategories.php. The manipulation of the argument categoriesStatus leads to sql injection. The attack can be initiated remotely. VDB-223306 is the identifier assigned to this vulnerability.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
technical-description
https://vuldb.com/?id.223306
Permissions Required, Third Party Advisory, VDB Entry signature
permissions-required
https://vuldb.com/?ctiid.223306
Exploit, Third Party Advisory broken-link
https://blog.csdn.net/weixin_43864034/article/details/129622219
Scores
CVSS v3
6.3
EPSS
0.0081
EPSS Percentile
52.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Details
CWE
CWE-89
Status
published
Products (1)
canteen_management_system_project/canteen_management_system
1.0
Published
Mar 17, 2023
Tracked Since
Feb 18, 2026