CVE-2023-2656

A vulnerability classified as critical has been found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file /classes/Master.php?f=delete_service. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-228798 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/AC-Repair-and-Services-System---SQL-injections.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.228798Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.228798Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/AC-Repair-and-Services-System---SQL-injections.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.228798Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.228798Permissions Required, Third Party Advisory, VDB Entry

Published

May 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26553mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bo…5.6
• CVE-2023-26554mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bo…5.6
• CVE-2023-26555praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 ha…6.4
• CVE-2023-26556io.finnet tss-lib before 2.0.0 can leak a secret key via a t…9.1
• CVE-2023-26557io.finnet tss-lib before 2.0.0 can leak the lambda value of …7.5
• CVE-2023-26559A directory traversal vulnerability in Oxygen XML Web Author…5.3
• CVE-2023-26560Northern.tech CFEngine Enterprise before 3.21.1 allows a sub…6.5
• CVE-2023-26562In Zimbra Collaboration (ZCS) 8.8.15 and 9.0, a closed accou…6.5
• CVE-2023-26563The Syncfusion EJ2 Node File Provider 0102271 is vulnerable …9.8
• CVE-2023-26564The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerab…9.8
• CVE-2023-26566Sangoma FreePBX 1805 through 2203 on Linux contains hardcode…8.6
• CVE-2023-26567Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO …8.1