CVE-2023-4449

Summary

CVE-2023-4449 is a critical vulnerability affecting SourceCodester's Free and Open Source Inventory Management System version 1.0. An unknown function in the file /index.php?page=member contains a SQL injection flaw, which can be exploited by manipulating the argument columns[0][data]. This vulnerability enables attackers to launch remote attacks, and the exploit has already been disclosed to the public. Vulnerability database VDB assigns the identifier VDB-237570 to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.