What’s Vulnerable › Vulnerabilities

CVE-2023-1785: SourceCodester Earnings and Expense Tracker App manage_user.php sql injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-03-31 · updated 2026-06-17
• Weakness: CWE-89

Description

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as critical. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-224700.

Affected products

• SourceCodester Earnings and Expense Tracker App: 1.0

References

• https://github.com/web-zxl/img/blob/main/4.png
• https://vuldb.com/?ctiid.224700
• https://vuldb.com/?id.224700
• https://github.com/web-zxl/img/blob/main/4.png
• https://vuldb.com/?ctiid.224700
• https://vuldb.com/?id.224700

Get alerted when CVE-2023-1785 or the next vulnerability affects your stack