CVE-2023-2643

A vulnerability classified as critical was found in SourceCodester File Tracker Manager System 1.0. This vulnerability affects unknown code of the file register/update_password.php of the component POST Parameter Handler. The manipulation of the argument new_password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228772.

• CWE-89

• https://github.com/GZRsecurity/cve/blob/main/SQLi.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.228772Third Party Advisory
• https://vuldb.com/?id.228772Third Party Advisory
• https://github.com/GZRsecurity/cve/blob/main/SQLi.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.228772Third Party Advisory
• https://vuldb.com/?id.228772Third Party Advisory

Published

May 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26424Adobe Acrobat Reader versions 23.001.20093 (and earlier) and…7.8
• CVE-2023-26425Adobe Acrobat Reader versions 23.001.20093 (and earlier) and…7.8
• CVE-2023-26426Illustrator version 26.5.2 (and earlier) and 27.2.0 (and ear…7.8
• CVE-2023-26427Default permissions for a properties file were too permissiv…3.3
• CVE-2023-26428Attackers can successfully request arbitrary snippet IDs, in…6.5
• CVE-2023-26429Control characters were not removed when exporting user feed…5.3
• CVE-2023-26430Attackers with access to user accounts can inject arbitrary …4.3
• CVE-2023-26431IPv4-mapped IPv6 addresses did not get recognized as "local"…4.3
• CVE-2023-26432When adding an external mail account, processing of SMTP "ca…4.3
• CVE-2023-26433When adding an external mail account, processing of IMAP "ca…4.3
• CVE-2023-26434When adding an external mail account, processing of POP3 "ca…4.3
• CVE-2023-26435It was possible to call filesystem and network references us…5