CVE-2023-1058
Last modified
CVE-2023-1058 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A vulnerability classified as critical has been found in SourceCodester Doctors Appointment System 1.0. This affects an unknown part of the file create-account.php. EPSS estimates a 0.76% chance of exploitation in the next 30 days.
Description
A vulnerability classified as critical has been found in SourceCodester Doctors Appointment System 1.0. This affects an unknown part of the file create-account.php. The manipulation of the argument newemail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221823.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Doctors Appointment System Project | Doctors Appointment System | 1.0 |
References
- https://vuldb.com/?ctiid.221823Permissions Required
- https://vuldb.com/?id.221823Permissions Required
- https://vuldb.com/?ctiid.221823Permissions Required
- https://vuldb.com/?id.221823Permissions Required
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-1058?
How severe is CVE-2023-1058?
How do I fix CVE-2023-1058?
Are you affected by CVE-2023-1058?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
