CVE-2023-1294

A vulnerability was found in SourceCodester File Tracker Manager System 1.0. It has been classified as critical. Affected is an unknown function of the file /file_manager/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222648.

• CWE-89

• https://github.com/godownio/bug_report/blob/main/vendors/hemedy99/File%20Tracker%20Manager%20System/SQLi-1.mdExploit, Vendor Advisory
• https://vuldb.com/?ctiid.222648Third Party Advisory
• https://vuldb.com/?id.222648Third Party Advisory
• https://github.com/godownio/bug_report/blob/main/vendors/hemedy99/File%20Tracker%20Manager%20System/SQLi-1.mdExploit, Vendor Advisory
• https://vuldb.com/?ctiid.222648Third Party Advisory
• https://vuldb.com/?id.222648Third Party Advisory

Published

Mar 9, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1288 An XML External Entity injection (XXE) vulnerability…7.5
• CVE-2023-1289A vulnerability was discovered in ImageMagick where a specia…5.5
• CVE-2023-1290A vulnerability, which was classified as critical, has been …9.8
• CVE-2023-1291A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-1292A vulnerability has been found in SourceCodester Sales Track…9.8
• CVE-2023-1293A vulnerability was found in SourceCodester Online Graduate …8.1
• CVE-2023-1295A time-of-check to time-of-use issue exists in io_uring subs…7
• CVE-2023-1296HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did n…5.3
• CVE-2023-1297Consul and Consul Enterprise's cluster peering implementatio…7.5
• CVE-2023-1298ServiceNow has released upgrades and patches that address a …6.1
• CVE-2023-1299HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submi…8.8
• CVE-2023-1300A vulnerability classified as critical was found in SourceCo…9.8