CVE-2023-5027

A vulnerability classified as critical was found in SourceCodester Simple Membership System 1.0. Affected by this vulnerability is an unknown functionality of the file club_validator.php. The manipulation of the argument club leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-239869 was assigned to this vulnerability.

• CWE-89

• https://github.com/LianghaoW/CveHub/blob/main/Simple-Membership-System%20club_validator.php%20has%20Sqlinjection.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.239869Third Party Advisory
• https://vuldb.com/?id.239869Third Party Advisory
• https://github.com/LianghaoW/CveHub/blob/main/Simple-Membership-System%20club_validator.php%20has%20Sqlinjection.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.239869Third Party Advisory
• https://vuldb.com/?id.239869Third Party Advisory

Published

Sep 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-50264Bazarr manages and downloads subtitles. Prior to 1.3.1, Baza…7.5
• CVE-2023-50265Bazarr manages and downloads subtitles. Prior to 1.3.1, the …7.5
• CVE-2023-50266Bazarr manages and downloads subtitles. In version 1.2.4, th…5.3
• CVE-2023-50267MeterSphere is a one-stop open source continuous testing pla…4.3
• CVE-2023-50268jq is a command-line JSON processor. Version 1.7 is vulnerab…5.5
• CVE-2023-50269Squid is a caching proxy for the Web. Due to an Uncontrolled…7.5
• CVE-2023-50270Session Fixation Apache DolphinScheduler before version 3.2.…6.5
• CVE-2023-50271 A potential security vulnerability has been identified with…7.5
• CVE-2023-50272A potential security vulnerability has been identified in HP…9.8
• CVE-2023-50274HPE OneView may allow command injection with local privilege…7.8
• CVE-2023-50275HPE OneView may allow clusterService Authentication Bypass r…7.5
• CVE-2023-5028A vulnerability, which was classified as problematic, has be…4.6