CVE-2023-2652 – SourceCodester Lost and Found Information System sql injection

https://notcve.org/view.php?id=CVE-2023-2652

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file /classes/Master.php?f=delete_item. The manipulation leads to sql injection. It is possible to launch the attack remotely. • https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Lost-and-Found-Information-System---Multiple-SQL-injections.md#2classesmasterphpfdelete_item https://vuldb.com/?ctiid.228780 https://vuldb.com/?id.228780 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •