Lucene search

MitreCVE-2023-33338

HistoryMay 23, 2023 - 1:15 p.m.

CVE-2023-33338

2023-05-2313:15:09

CWE-89

mitre

web.nvd.nist.gov

119

old age home management

sql injection

vulnerability

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.011

Percentile

85.0%

JSON

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter.

Affected configurations

Nvd

Node

phpgurukulold_age_home_management_systemMatch1.0

VendorProductVersionCPE
phpgurukulold_age_home_management_system1.0cpe:2.3:a:phpgurukul:old_age_home_management_system:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpgurukul	old_age_home_management_system	1.0	cpe:2.3:a:phpgurukul:old_age_home_management_system:1.0:::::::*

References

github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/ANUJ-KUMAR/Old-Age-Home-Management-2022-2023-1.0

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.011

Percentile

85.0%

JSON

Related for CVE-2023-33338