CVE-2023-3152

A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\posts\view_post.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231021 was assigned to this vulnerability.

• CWE-89

• https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#5sql-injection-vulnerability-in-adminpostsview_postphpExploit, Third Party Advisory
• https://vuldb.com/?ctiid.231021Permissions Required, VDB Entry
• https://vuldb.com/?id.231021Third Party Advisory, VDB Entry
• https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/Online%20Discussion%20Forum%20Site%20-%20multiple%20vulnerabilities.md#5sql-injection-vulnerability-in-adminpostsview_postphpExploit, Third Party Advisory
• https://vuldb.com/?ctiid.231021Permissions Required, VDB Entry
• https://vuldb.com/?id.231021Third Party Advisory, VDB Entry

Published

Jun 7, 2023

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31506A cross-site scripting (XSS) vulnerability in Grav versions …5.4
• CVE-2023-31508Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
• CVE-2023-3151A vulnerability was found in SourceCodester Online Discussio…8.8
• CVE-2023-31517A memory leak in the component CConsole::Chain of Teeworlds …7.5
• CVE-2023-31518A heap use-after-free in the component CDataFileReader::GetI…5.5
• CVE-2023-31519Pharmacy Management System v1.0 was discovered to contain a …9.8
• CVE-2023-31528Motorola CX2L Router 1.0.1 was discovered to contain a comma…8.8
• CVE-2023-31529Motorola CX2L Router 1.0.1 was discovered to contain a comma…8.8
• CVE-2023-3153A flaw was found in Open Virtual Network where the service m…5.3
• CVE-2023-31530Motorola CX2L Router 1.0.1 was discovered to contain a comma…8.8
• CVE-2023-31531Motorola CX2L Router 1.0.1 was discovered to contain a comma…8.8
• CVE-2023-3154The WordPress Gallery Plugin WordPress plugin before 3.39 is…7.5