A flaw has been found in SourceCodester Simple CRUD using PHP and FPDF 1.0.
A flaw has been found in SourceCodester Simple CRUD using PHP and FPDF 1.0. Affected by this vulnerability is an unknown functionality of the file app/register.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- SourceCodester
- Product
- Simple CRUD using PHP and FPDF
- CVSS v3.1
- 6.3 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- Exploitation
- public exploit code reported
- Weakness
- CWE-74, CWE-89
- NVD status
- Deferred
Why it ranks 30 (Notable)
- Public exploit code reported
- CVSS v3.1 6.3 medium
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.