Every CVE Search/ Get API key

CVE-2023-3152

SourceCodester Online Discussion Forum Site view_post.php sql injection

6.3 MediumFix available

A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\posts\view_post.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231021 was assigned to this vulnerability.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.84%Up 0.8 points since Jun 8, 2023
90%50%10%1%

What each source reports

CVE List Score used 6.3

SourceCodester Online Discussion Forum Site view_post.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\posts\view_post.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231021 was assigned to this vulnerability.

Record
CVE-2023-3152
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 3.0
6.3 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0
6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-89
Updated
2026-11-02
EUVDEUVD-2023-43836 6.3

A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\posts\view_post.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231021 was assigned to this vulnerability.

Record
EUVD-2023-43836
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-03
GitHub AdvisoriesGHSA-hg4r-gx6g-m7fr 6.3

A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum...

A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\posts\view_post.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231021 was assigned to this vulnerability.

Record
GHSA-hg4r-gx6g-m7fr
CVSS 3.0
6.3 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-89
Updated
2026-11-02
NVD 6.3

A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This affects an unknown part of the file admin\posts\view_post.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231021 was assigned to this vulnerability.

Record
CVE-2023-3152
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-89
Updated
2026-11-02
OSVopenSUSE-SU-2024:13206-1 No score

libopenvswitch-3_1-0-3.1.0-15.1 on GA media

These are all security issues fixed in the libopenvswitch-3_1-0-3.1.0-15.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13206-1
Updated
2026-11-02
OSVSUSE-SU-2023:3710-1 No score

Security update for openvswitch3

This update for openvswitch3 fixes the following issues:

  • CVE-2023-3153: Fixed service monitor MAC flow is not rate limited (bsc#1212125).
Record
SUSE-SU-2023:3710-1
Updated
2026-11-02
OSVSUSE-SU-2026:0280-1 No score

Security update for openvswitch

This update for openvswitch fixes the following issues:

Update to v3.1.7:

  • CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload (bsc#1219465).
  • CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of service (bsc#1255435).
  • CVE-2023-1668: openvswitch: remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).
  • CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited (bsc#1212125).
  • CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie (bsc#1216002).
Record
SUSE-SU-2026:0280-1
Updated
2026-11-02
OSVSUSE-SU-2026:0290-1 No score

Security update for openvswitch3

This update for openvswitch3 fixes the following issues:

Update to v3.1.7:

  • CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload (bsc#1219465).
  • CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of service (bsc#1255435).
  • CVE-2023-1668: openvswitch: remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).
  • CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited (bsc#1212125).
  • CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie (bsc#1216002).
Record
SUSE-SU-2026:0290-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openvswitch3
SUSE:Linux Enterprise Module for Server Applications 15 SP5
 before 3.1.0-150500.3.6.2
3.1.0-150500.3.6.2
openvswitch3
openSUSE:Leap 15.5
 before 3.1.0-150500.3.6.2
3.1.0-150500.3.6.2
openvswitch
SUSE:Linux Enterprise Server 15 SP6-LTSS
 before 3.1.7-150600.33.9.1
3.1.7-150600.33.9.1
openvswitch
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
 before 3.1.7-150600.33.9.1
3.1.7-150600.33.9.1
openvswitch
openSUSE:Leap 15.6
 before 3.1.7-150600.33.9.1
3.1.7-150600.33.9.1
openvswitch3
SUSE:Linux Enterprise Micro 5.5
 before 3.1.7-150500.3.25.1
3.1.7-150500.3.25.1
openvswitch3
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 3.1.7-150500.3.25.1
3.1.7-150500.3.25.1
openvswitch3
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 3.1.7-150500.3.25.1
3.1.7-150500.3.25.1
openvswitch3
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 3.1.7-150500.3.25.1
3.1.7-150500.3.25.1
openvswitch3
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 3.1.7-150500.3.25.1
3.1.7-150500.3.25.1
openvswitch3
openSUSE:Leap 15.6
 before 3.1.7-150500.3.25.1
3.1.7-150500.3.25.1
openvswitch
openSUSE:Tumbleweed
 before 3.1.0-15.1
3.1.0-15.1

History

History
RecordedChangedSources
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-3152 is a medium vulnerability (CVSS 6.3) in Razormist Online Discussion Forum Site, published June 7, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.84%, the 57th percentile. Fixed in openvswitch3 3.1.0-150500.3.6.2.

References

Show 14 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open