CVE-2023-0999 SourceCodester Sales Tracker Management System cross-site request forgery

What is CVE-2023-0999?

CVE-2023-0999 is a medium-severity vulnerability in SourceCodester Sales Tracker Management System, published on 24 Feb 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A vulnerability classified as problematic was found in SourceCodester Sales Tracker Management System 1.0. This vulnerability affects unknown code of the file admin/?page=user/list. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221734 is the identifier assigned to this vulnerability.

Weakness: CWE-352

Which versions are affected by CVE-2023-0999?

It affects 1 product.

Products include Sales Tracker Management System Project Sales Tracker Management System.

How do I fix CVE-2023-0999?

No fix has been published for CVE-2023-0999 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-0999 being exploited?

There is no known exploitation of CVE-2023-0999 in the wild and no public exploit code.

Other vulnerabilities in SourceCodester Sales Tracker Management System

• CVE-2023-26774 Information disclosure in n/a High 7.5
• CVE-2023-1983 SourceCodester Sales Tracker Management System GET Parameter manage_product.php sql injection Medium 6.3
• CVE-2023-1290 SourceCodester Sales Tracker Management System view_client.php sql injection Medium 6.3
• CVE-2023-1291 SourceCodester Sales Tracker Management System manage_client.php sql injection Medium 6.3
• CVE-2023-1292 SourceCodester Sales Tracker Management System Master.php delete_client sql injection Medium 6.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-pp6v-gcw7-42cf.