CVE-2023-5018

Summary

CVE-2023-5018 is a critical vulnerability identified in the SourceCodester Lost and Found Information System 1.0. A remotely exploitable SQL injection flaw resides in the POST Parameter Handler of an unspecified part of the /classes/Master.php?f=save_category file. By manipulating the id argument, an attacker can inject malicious SQL code and potentially gain unauthorized access to sensitive data. This vulnerability, identified as VDB-239859, could have serious implications for systems using this software.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.