CVE-2023-3147

A vulnerability has been found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin\categories\view_category.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231016.

• CWE-89

• https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#7sql-injection-vulnerability-in-admincategoriesview_categoryphpExploit, Third Party Advisory
• https://vuldb.com/?ctiid.231016Permissions Required, VDB Entry
• https://vuldb.com/?id.231016Third Party Advisory, VDB Entry
• https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#7sql-injection-vulnerability-in-admincategoriesview_categoryphpExploit, Third Party Advisory
• https://vuldb.com/?ctiid.231016Permissions Required, VDB Entry
• https://vuldb.com/?id.231016Third Party Advisory, VDB Entry

Published

Jun 7, 2023

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31461Attackers can exploit an open API listener on SteelSeries GG…7.5
• CVE-2023-31462An issue was discovered in SteelSeries GG 36.0.0. An attacke…8.8
• CVE-2023-31465An issue was discovered in FSMLabs TimeKeeper 8.0.17 through…9.8
• CVE-2023-31466An XSS issue was discovered in FSMLabs TimeKeeper 8.0.17. On…5.4
• CVE-2023-31468An issue was discovered in Inosoft VisiWin 7 through 2022-2.…7.8
• CVE-2023-31469 A REST interface in Apache StreamPipes (versions 0.69.0 to …8.8
• CVE-2023-31470SmartDNS through 41 before 56d0332 allows an out-of-bounds w…9.8
• CVE-2023-31471An issue was discovered on GL.iNet devices before 3.216. Thr…9.8
• CVE-2023-31472An issue was discovered on GL.iNet devices before 3.216. The…7.5
• CVE-2023-31473An issue was discovered on GL.iNet devices before 3.216. The…4.9
• CVE-2023-31474An issue was discovered on GL.iNet devices before 3.216. Thr…7.5
• CVE-2023-31475An issue was discovered on GL.iNet devices before 3.216. The…9.8