{"id":"CVE-2023-3177","aliases":["EUVD-2023-43858","GHSA-7gj5-9v5m-8xpx"],"status":"published","title":"SourceCodester Lost and Found Information System view_inquiry.php sql injection","description":"A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin\\inquiries\\view_inquiry.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231151.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00728,"percentile":0.54514,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2023-06-09T06:00:04Z","modified":"2026-06-17T06:13:31Z","products":[{"vendor":"oretnom23","product":"lost_and_found_information_system"},{"vendor":"sourcecodester","product":"lost and found information system"}],"references":[{"url":"https://vuldb.com/?id.231151","tags":["vdb-entry","technical-description","x_transferred","Third Party Advisory"]},{"url":"https://vuldb.com/?ctiid.231151","tags":["signature","permissions-required","x_transferred","Third Party Advisory"]},{"url":"https://github.com/AnotherN/cvv/blob/main/imgs/Lost%20and%20Found%20Information%20System%20-%20multiple%20vulnerabilities.md#4sql-injection-vulnerability-in-admininquiriesview_inquiryphp","tags":["exploit","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3177"},{"url":"https://github.com/advisories/GHSA-7gj5-9v5m-8xpx"}],"sources":{"cve":[{"id":"CVE-2023-3177","title":"SourceCodester Lost and Found Information System view_inquiry.php sql injection","description":"A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin\\inquiries\\view_inquiry.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231151.","status":"published","published":"2023-06-09T06:00:04.33Z","modified":"2024-11-22T15:36:59.661Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"},{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:35:24.707957Z"}],"euvd":[{"id":"EUVD-2023-43858","description":"A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin\\inquiries\\view_inquiry.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231151.","status":"published","published":"2023-06-09T06:00:04Z","modified":"2024-11-22T15:36:59Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T00:04:50.64101Z"}],"ghsa":[{"id":"GHSA-7gj5-9v5m-8xpx","title":"A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and...","description":"A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin\\inquiries\\view_inquiry.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231151.","status":"published","published":"2023-06-09T06:30:32Z","modified":"2023-11-04T05:02:52Z","cvss":[{"version":"3.0","score":6.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:54:50.422834Z"}],"nvd":[{"id":"CVE-2023-3177","description":"A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin\\inquiries\\view_inquiry.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231151.","status":"published","published":"2023-06-09T06:16:12.87Z","modified":"2026-06-17T06:13:31.303Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:08:05.329837Z"}]}}