High severity · published Sep 27, 2023
CVE-2023-44047
Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection
7.2
CVSS
0.8%
EPSS
No
On KEV
Description
Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TT
Toll Tax Management System · Oretnom23
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-44047
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-44047
Exploit
https://github.com/xcodeOn1/SQLI-TollTax/blob/main/README.md
Exploit
https://github.com/xcodeOn1/xcode0x-CVEs/blob/main/CVE/CVE-2023-44047.md
More from Toll Tax Management System
9.8
CVE-2022-30053
In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks
6.1
CVE-2023-36158
Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on…
5.4
CVE-2024-51032
A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web…
5.4
CVE-2022-30837
Toll-tax-management-system v1.0 is vulnerable to Cross Site Scripting (XSS) via /ttms/classes/Master.php?f=save_recipient, vehicle_name