CVE-2023-3693

A vulnerability classified as critical was found in SourceCodester Life Insurance Management System 1.0. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-234244.

• CWE-89

• https://github.com/tangyi19/Life-Insurance-Management-System/blob/main/Life%20Insurance%20Management%20System%20login.php%20has%20Sqlinjection.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.234244Permissions Required, Third Party Advisory
• https://vuldb.com/?id.234244Permissions Required, Third Party Advisory
• https://github.com/tangyi19/Life-Insurance-Management-System/blob/main/Life%20Insurance%20Management%20System%20login.php%20has%20Sqlinjection.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.234244Permissions Required, Third Party Advisory
• https://vuldb.com/?id.234244Permissions Required, Third Party Advisory

Published

Jul 16, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-36921SAP Solution Manager (Diagnostics agent) - version 7.20, all…7.2
• CVE-2023-36922Due to programming error in function module and report, IS-O…8.8
• CVE-2023-36923SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner…7.8
• CVE-2023-36924While using a specific function, SAP ERP Defense Forces and …4.9
• CVE-2023-36925SAP Solution Manager (Diagnostics agent) - version 7.20, all…7.2
• CVE-2023-36926Due to missing authentication check in SAP Host Agent - vers…5.3
• CVE-2023-36932In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021…8.1
• CVE-2023-36933In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1…7.5
• CVE-2023-36934In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021…9.1
• CVE-2023-36935Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-36936Cross-Site Scripting (XSS) vulnerability in PHPGurukul Onlin…6.1
• CVE-2023-36939Cross-Site Scripting (XSS) vulnerability in Hostel Managemen…6.1