CVE-2023-0706

Name of the Vulnerable Software and Affected Versions SourceCodester Medical Certificate Generator App version 1.0

Description A critical issue has been found in the manage record.php file of the SourceCodester Medical Certificate Generator App, related to the incorrect neutralization of special elements in output. The manipulation of the id argument leads to SQL injection. This issue can be exploited remotely, allowing an attacker to execute arbitrary SQL code.

Recommendations For version 1.0, consider disabling the manage record.php file or restricting access to it until a patch is available. As a temporary workaround, avoid using the id argument in the affected functionality to minimize the risk of exploitation.