CVE-2023-1737: Young Entrepreneur E-Negosyo System Project Young Entrepreneur E-Negosyo System

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability, which was classified as critical, was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument U_USERNAME leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-224625 was assigned to this vulnerability.

Affected products

• Young Entrepreneur E-Negosyo System Project Young Entrepreneur E-Negosyo System: version 1.0 only

Published 2023-03-30. Last modified 2026-06-17.