CVE-2023-2672

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file items/view.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228888.

• CWE-89
• CWE-89

• https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/CVE-2023-2672.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.228888Third Party Advisory
• https://vuldb.com/?id.228888Third Party Advisory
• https://github.com/tht1997/CVE_2023/blob/main/Lost%20and%20Found%20Information%20System/CVE-2023-2672.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.228888Third Party Advisory
• https://vuldb.com/?id.228888Third Party Advisory

Published

May 12, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2669A vulnerability was found in SourceCodester Lost and Found I…9.8
• CVE-2023-26690File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allo…8.8
• CVE-2023-26691Directory Traversal vulnerability in CS-Cart MultiVendor 4.1…7.2
• CVE-2023-26692ZCBS Zijper Collectie Beheer Systeem (ZCBS), Zijper Publicat…6.1
• CVE-2023-2670A vulnerability was found in SourceCodester Lost and Found I…8.8
• CVE-2023-2671A vulnerability was found in SourceCodester Lost and Found I…6.1
• CVE-2023-2673Improper Input Validation vulnerability in PHOENIX CONTACT F…5.3
• CVE-2023-26733Buffer Overflow vulnerability found in tinyTIFF v.3.0 allows…7.8
• CVE-2023-26735blackbox_exporter v0.23.0 was discovered to contain an acces…7.5
• CVE-2023-2674Improper Access Control in GitHub repository openemr/openemr…4.3
• CVE-2023-2675Improper Restriction of Excessive Authentication Attempts in…9.8
• CVE-2023-26750SQL injection vulnerability found in Yii Framework Yii 2 Fra…9.8