CVE-2023-2346

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/inquiries/view_inquiry.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227589 was assigned to this vulnerability.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%201.pdfExploit
• https://vuldb.com/?ctiid.227589Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.227589Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Service%20Provider%20Management%20System/Service%20Provider%20Management%20System%20-%20vuln%201.pdfExploit
• https://vuldb.com/?ctiid.227589Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.227589Permissions Required, Third Party Advisory, VDB Entry

Published

Apr 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-23454cbq_classify in net/sched/sch_cbq.c in the Linux kernel thro…5.5
• CVE-2023-23455atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel th…5.5
• CVE-2023-23456A heap-based buffer overflow issue was discovered in UPX in …5.5
• CVE-2023-23457A Segmentation fault was found in UPX in PackLinuxElf64::inv…5.5
• CVE-2023-23458Sunell DVR, latest version, CWE-200: Exposure of Sensitive I…6.5
• CVE-2023-23459Priority Windows may allow Command Execution via SQL Injecti…9.8
• CVE-2023-23460Priority Web version 19.1.0.68, parameter manipulation on an…9.8
• CVE-2023-23461Libpeconv – access violation, before commit b076013 (30/11/2…9.8
• CVE-2023-23462Libpeconv – integer overflow, before commit 75b1565 (30/11/2…9.8
• CVE-2023-23463Sunell DVR, latest version, Insufficiently Protected Credent…7.5
• CVE-2023-23464Media CP Media Control Panel latest version. A Permissive Fl…7.5
• CVE-2023-23465Media CP Media Control Panel latest version. CSRF possible t…8.8