CVE-2023-3987
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jul 28, 2023
Updated: May 17, 2024
CWE ID 89
Summary
CVE-2023-3987 is a critical vulnerability affecting the SourceCodester Simple Online Mens Salon Management System 1.0. An unknown function in the /admin/ area, specifically the 'manage_user' page with id argument, is susceptible to SQL injection. attackers can exploit this remotely by manipulating the id parameter. The vulnerability, identified as VDB-235608, was disclosed to the public and active exploitation is possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share