High · 8.4 CVE-2023-33676 EUVD-2023-37832GHSA-rr8j-4qpf-75m2

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=*" wh…

Published Mar 7, 2024 · Updated Aug 16, 2024 · Assigned by mitre

Description

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=*" which can be escalated to the remote command execution.

References

https://github.com/ASR511-OO7/CVE-2023-33676/blob/main/CVE-30