CVE-2023-0562
high · 7.3A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-219716.
7.3
CVSS
44.3%
EPSS (exploit prob.)
99th
EPSS percentile
2023-01-28
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-89
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| phpgurukul | bank_locker_management_system | 1.0 |
Check a specific version with /api/v1/cve/match.
References
- https://github.com/ctflearner/Vulnerability/blob/main/Bank_Locker_Management_System/Bank%20Locker%20Management%20System-SQL%20.md
- https://vuldb.com/?ctiid.219716
- https://vuldb.com/?id.219716
- https://github.com/ctflearner/Vulnerability/blob/main/Bank_Locker_Management_System/Bank%20Locker%20Management%20System-SQL%20.md
- https://vuldb.com/?ctiid.219716
- https://vuldb.com/?id.219716
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2023-0562