Skip to content
OpenAdvisories
High · 7.3 CVE-2023-1737 EUVD-2023-23959GHSA-r834-jp26-7ggv

SourceCodester Young Entrepreneur E-Negosyo System login.php sql injection

Published Mar 30, 2023 · Updated Feb 11, 2025 · Assigned by VulDB

Description

A vulnerability, which was classified as critical, was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument U_USERNAME leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-224625 was assigned to this vulnerability.

Affected products

VendorProductAffectedFixed
SourceCodester Young Entrepreneur E-Negosyo System 1.0 —

References