CVE-2023-7139
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Dec 28, 2023
Updated: May 17, 2024
CWE ID 89
Summary
CVE-2023-7139 is a newly disclosed vulnerability affecting the HTTP POST Request Handler component in the code-projects Client Details System 1.0. The issue lies within the /admin/regester.php file, where manipulation of the fname, lname, email, or contact arguments can lead to SQL injection. This vulnerability, identified as VDB-249142, has been made public, increasing the risk of exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Code Projects