{"id":"CVE-2023-5805","state":"PUBLISHED","title":"SourceCodester Simple Real Estate Portal System view_estate.php sql injection","description":"A vulnerability was found in SourceCodester Simple Real Estate Portal System 1.0. It has been classified as critical. Affected is an unknown function of the file view_estate.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-243618 is the identifier assigned to this vulnerability.","publishedAt":"2023-10-26T21:00:07.515Z","updatedAt":"2024-09-09T16:08:13.726Z","severity":{"score":6.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","source":"VulDB"},"assigner":"VulDB","products":["SourceCodester Simple Real Estate Portal System"],"affected":[{"vendor":"SourceCodester","product":"Simple Real Estate Portal System","versions":[{"version":"1.0","status":"affected"}]}],"references":["https://vuldb.com/?id.243618","https://vuldb.com/?ctiid.243618","https://github.com/lxxcute/Bug/blob/main/Real%20Estate%20Portal%20System%20view_estate.php%20has%20Sqlinjection.pdf"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/5xxx/CVE-2023-5805.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-5805","state":"PUBLISHED","datePublished":"2023-10-26T21:00:07.515Z","dateUpdated":"2024-09-09T16:08:13.726Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2023-10-26T13:57:53.169Z"},"containers":{"cna":{"title":"SourceCodester Simple Real Estate Portal System view_estate.php sql injection","descriptions":[{"lang":"en","value":"A vulnerability was found in SourceCodester Simple Real Estate Portal System 1.0. It has been classified as critical. Affected is an unknown function of the file view_estate.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-243618 is the identifier assigned to this vulnerability."},{"lang":"de","value":"Es wurde eine kritische Schwachstelle in SourceCodester Simple Real Estate Portal System 1.0 ausgemacht. Dabei betrifft es einen unbekannter Codeteil der Datei view_estate.php. Dank Manipulation des Arguments id mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"SourceCodester","product":"Simple Real Estate Portal System","versions":[{"version":"1.0","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.243618","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.243618","tags":["signature","permissions-required"]},{"url":"https://github.com/lxxcute/Bug/blob/main/Real%20Estate%20Portal%20System%20view_estate.php%20has%20Sqlinjection.pdf","tags":["exploit","issue-tracking"]}],"metrics":[{"cvssV3_1":{"version":"3.1","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","type":"CWE","lang":"en","description":"CWE-89 SQL Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2023-10-26T21:00:07.515Z"},"timeline":[{"time":"2023-10-26T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2023-10-26T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2023-10-26T16:03:07.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Lxx123 (VulDB User)","type":"analyst"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.243618","tags":["vdb-entry","technical-description","x_transferred"]},{"url":"https://vuldb.com/?ctiid.243618","tags":["signature","permissions-required","x_transferred"]},{"url":"https://github.com/lxxcute/Bug/blob/main/Real%20Estate%20Portal%20System%20view_estate.php%20has%20Sqlinjection.pdf","tags":["exploit","issue-tracking","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T08:14:24.302Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-09T16:07:54.446114Z","id":"CVE-2023-5805","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-09T16:08:13.726Z"}}]}}}