CVE-2023-1949

A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown function of the file change-password.php of the component Change Password Handler. The manipulation of the argument password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225336.

• CWE-89

• https://github.com/vsdwef/BP-Monitoring-Management-System/blob/main/ChangePassword.php_SQL_English.pdfExploit
• https://vuldb.com/?ctiid.225336Permissions Required
• https://vuldb.com/?id.225336Third Party Advisory
• https://github.com/vsdwef/BP-Monitoring-Management-System/blob/main/ChangePassword.php_SQL_English.pdfExploit
• https://vuldb.com/?ctiid.225336Permissions Required
• https://vuldb.com/?id.225336Third Party Advisory

Published

Apr 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-1943Privilege Escalation in kOps using GCE/GCP Provider in Gossi…8.8
• CVE-2023-1944This vulnerability enables ssh access to minikube container …7.8
• CVE-2023-1945Unexpected data returned from the Safe Browsing API could ha…6.5
• CVE-2023-1946A vulnerability was found in SourceCodester Survey Applicati…6.1
• CVE-2023-1947A vulnerability was found in taoCMS 3.0.2. It has been class…9.8
• CVE-2023-1948A vulnerability, which was classified as problematic, has be…6.1
• CVE-2023-1950A vulnerability has been found in PHPGurukul BP Monitoring M…9.8
• CVE-2023-1951A vulnerability was found in SourceCodester Online Computer …9.8
• CVE-2023-1952A vulnerability was found in SourceCodester Online Computer …9.8
• CVE-2023-1953A vulnerability was found in SourceCodester Online Computer …8.8
• CVE-2023-1954A vulnerability was found in SourceCodester Online Computer …8.8
• CVE-2023-1955A vulnerability classified as critical has been found in Sou…9.8