CVE-2023-5272

A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. This affects an unknown part of the file edit_parcel.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-240885 was assigned to this vulnerability.

• CWE-89

• https://github.com/E1CHO/cve_hub/blob/main/Best%20courier%20management%20system/Best%20courier%20management%20system%20project%20in%20php%20-%20vuln%204.pdfExploit, Product
• https://vuldb.com/?ctiid.240885Permissions Required, VDB Entry
• https://vuldb.com/?id.240885Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Best%20courier%20management%20system/Best%20courier%20management%20system%20project%20in%20php%20-%20vuln%204.pdfExploit, Product
• https://vuldb.com/?ctiid.240885Permissions Required, VDB Entry
• https://vuldb.com/?id.240885Third Party Advisory, VDB Entry

Published

Sep 29, 2023

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-52714Vulnerability of defects introduced in the design process in…7.5
• CVE-2023-52715The SystemUI module has a vulnerability in permission manage…7.5
• CVE-2023-52716Vulnerability of starting activities in the background in th…7.5
• CVE-2023-52717Permission verification vulnerability in the lock screen mod…5.3
• CVE-2023-52718A connection hijacking vulnerability exists in some Huawei h…8.1
• CVE-2023-52719Privilege escalation vulnerability in the PMS module Impact:…5.5
• CVE-2023-52720Race condition vulnerability in the soundtrigger module Impa…4.1
• CVE-2023-52721The WindowManager module has a vulnerability in permission c…5.5
• CVE-2023-52722An issue was discovered in Artifex Ghostscript before 10.03.…5.5
• CVE-2023-52723In KDE libksieve before 23.03.80, kmanagesieve/session.cpp p…7.1
• CVE-2023-52724Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows o…8.1
• CVE-2023-52725Open Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 all…6.5