CVE-2023-43144

Description

Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php.

NVD

Severity: CRITICAL
CVE ID: CVE-2023-43144
CVSS Score: 9.8
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Refrence: NVDMITRE

Proof Of Concept

Pegasus0xx

Assets Management System 1.0 is vulnerable to SQL injection via the id parameter in delete.php

Refrence: GitHub