nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-51951 CVE-2023-51951
CRITICAL
Stock Management System v1.0 - Unauthenticated SQL Injection
Record summary
CVE-2023-51951 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute arbitrary code via the id parameter in the manage_bo.php file.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 6, 2024 · Source: CVE List
Proofs of concept
1Catalogued exploits
ExploitDBStock Management System v1.0 - Unauthenticated SQL InjectionExploitDB exploitby blu3mingNot analyzed1 file
References
3exploit-db.com
https://www.exploit-db.com/exploits/51990 wizlynxgroup.com
https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2023-004