VulnerabilityAnalyzed
CVE-2023-24204
SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitrary code via the name parameter in get-quote.php.
MEDIUM 5.4EPSS 0.64%
Does this matter?
Lower severity and a low EPSS score (0.64%). Track it; it rarely justifies an emergency change on its own.
Description
SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitrary code via the name parameter in get-quote.php.
- CVSS 3.1
- 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- EPSS
- 0.64% probability · 49th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- oretnom23/simple customer relationship management system
- Source
- cve@mitre.org
References
- https://github.com/momo1239/CVE-2023-24203-and-CVE-2023-24204Exploit, Third Party Advisory
- https://momonguyen.com/2023/cve-2023-24203/URL Repurposed
- https://www.sourcecodester.comProduct
- https://github.com/momo1239/CVE-2023-24203-and-CVE-2023-24204Exploit, Third Party Advisory
- https://momonguyen.com/2023/cve-2023-24203/URL Repurposed
- https://www.sourcecodester.comProduct
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.